{"schema":"threatline.record/2","record":{"id":"CVE-2025-55449","aliases":["GHSA-4m32-cjv7-f425","PYSEC-2026-285"],"summary":"AstrBot is vulnerable to RCE with hard-coded JWT signing keys","details":"### Summary\nAstrBot uses a hard-coded JWT signing key, allowing attackers to execute arbitrary commands by installing a malicious plugin.\n\n### Details\n\nAstrBot uses a [hard-coded JWT signing key](https://github.com/AstrBotDevs/AstrBot/blob/v3.5.16/astrbot/core/__init__.py), which allows attackers to bypass the authentication mechanism. Once bypassed, the attacker can install a Python plugin that will be imported [here](https://github.com/AstrBotDevs/AstrBot/blob/master/astrbot/dashboard/routes/plugin.py), enabling arbitrary command execution on the target host.\n\n### Impact\n\nAll publicly accessible AstrBot instances are vulnerable.\n\nFor more information, please see: [CVE-2025-55449-AstrBot-RCE](https://github.com/Marven11/CVE-2025-55449-AstrBot-RCE)\n\n### Patch\n\nThis vulnerability was first reported on **2025-06-21** and was patched on the **same day** (2025-06-21).\n\nThe vulnerability was publicly disclosed on **2025-11-14**. Prior to public disclosure, monitoring from AstrBot Cloud indicated that fewer than 2% of deployed instances were still running the affected version. Therefore, this disclosure is not expected to have a significant impact on existing active instances.","categories":["Libraries & packages"],"product":"astrbot","vendor":"n/a","ecosystem":"pip","affected_ranges":[{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-4m32-cjv7-f425","source_modified_at":"2026-10-27T15:17:57Z","fetched_at":"2026-10-27T16:27:21.584480Z","package":{"ecosystem":"pip","name":"astrbot"},"range":"< 3.5.18"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-55449","source_modified_at":"2026-05-08T17:52:44.644Z","fetched_at":"2026-10-27T16:27:21.584480Z","product":"n/a","vendor":"n/a","versions":[{"version":"n/a","status":"affected"}],"defaultStatus":null},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-4m32-cjv7-f425","source_modified_at":"2026-10-27T15:30:04.675896740Z","fetched_at":"2026-10-27T16:27:21.584480Z","package":{"name":"astrbot","ecosystem":"PyPI","purl":"pkg:pypi/astrbot"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18"}]}],"versions":["3.4.39","3.5.10","3.5.11","3.5.12","3.5.13","3.5.14","3.5.15","3.5.17","3.5.6","3.5.7","3.5.8","3.5.9"]}],"fixed_versions":[{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-4m32-cjv7-f425","source_modified_at":"2026-10-27T15:17:57Z","fetched_at":"2026-10-27T16:27:21.584480Z","package":{"ecosystem":"pip","name":"astrbot"},"version":"3.5.18"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-4m32-cjv7-f425","source_modified_at":"2026-10-27T15:30:04.675896740Z","fetched_at":"2026-10-27T16:27:21.584480Z","package":{"name":"astrbot","ecosystem":"PyPI","purl":"pkg:pypi/astrbot"},"version":"3.5.18"}],"cvss":9.8,"severity":"Critical","kev":{"listed":false},"epss":{"probability":0.00281,"percentile":0.20424,"score_date":"2026-10-27"},"published_at":"2026-05-08T00:00:00.000Z","modified_at":"2026-10-27T15:30:04.675896740Z","provenance":[{"source":"GitHub Advisory Database","url":"https://github.com/advisories/GHSA-4m32-cjv7-f425","fetched_at":"2026-10-27T16:27:21.584480Z","source_modified_at":"2026-10-27T15:17:57Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2025-55449","fetched_at":"2026-10-27T16:27:21.584480Z","source_modified_at":"2026-05-08T17:52:44.644Z"},{"source":"OSV","url":"https://osv.dev/vulnerability/GHSA-4m32-cjv7-f425","fetched_at":"2026-10-27T16:27:21.584480Z","source_modified_at":"2026-10-27T15:30:04.675896740Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2025-55449","fetched_at":"2026-10-27T16:27:21.584480Z","source_modified_at":"2026-10-27"}],"sources":["GitHub Advisory Database","CVE List","OSV","EPSS"],"references":[{"url":"https://github.com/AstrBotDevs/AstrBot/security/advisories/GHSA-4m32-cjv7-f425","source":"GitHub Advisory Database"},{"url":"https://github.com/AstrBotDevs/AstrBot/commit/d03e9fb90a0921a1bd10cf480bdacc9aaa246472","source":"GitHub Advisory Database"},{"url":"https://github.com/AstrBotDevs/AstrBot/releases/tag/v3.5.18","source":"GitHub Advisory Database"},{"source":"CVE List","url":"https://github.com/Marven11/CVE-2025-55449-AstrBot-RCE"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-55449","source":"GitHub Advisory Database"},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/astrbot/PYSEC-2026-285.yaml","source":"GitHub Advisory Database"},{"url":"https://pypi.org/project/astrbot","source":"GitHub Advisory Database"},{"url":"https://github.com/advisories/GHSA-4m32-cjv7-f425","source":"GitHub Advisory Database"},{"source":"CVE List","url":"https://github.com/AstrBotDevs/AstrBot"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","ssvc":{"exploitation":"none","automatable":"yes","technical_impact":"partial","assessed_at":"2026-05-08T17:52:13.861034Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"ecosystem","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-27T15:30:04.675896740Z","content_hash":"9617b03e575794c003246c42dea452f0e1954262dd321487712e1d0ae0494c3e"}}