CVE-2026-6117

CVE-2026-6117 is a sandbox bypass vulnerability affecting AstrBot versions up to 4.22.1, specifically in the plugin installation upload endpoint (astrbot/dashboard/routes/plugin.py). The flaw allows manipulation of the File argument during plugin uploads, potentially enabling unauthorized code execution or file system access on affected systems. The vulnerability carries a CVSS 3.1 score of 6.3 (Medium severity) with a network-based attack vector requiring low complexity and low privileges. The impact is limited to confidentiality, integrity, and availability at the user level, with no privilege escalation or system-wide compromise indicated. The FAUCET risk score of 44/100 reflects moderate concern, though the extremely low EPSS score of 0.0004 suggests limited real-world exploitation likelihood. Exploitation status indicates the vulnerability is not currently included in CISA's Known Exploited Vulnerabilities (KEV) catalog and shows no active exploitation in the field. However, proof-of-concept exploit code has been made publicly available, creating potential risk for future attacks. The development team was notified through an issue report but has not yet responded with a patch or mitigation guidance, leaving users dependent on manual workarounds or version upgrades.