CVE-2025-48957 AstrBot Has Path Traversal Vulnerability in /api/chat/get_file
Attackers can exploit a path traversal flaw in the file retrieval API to access sensitive configuration data like API keys and passwords.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-48957?
CVE-2025-48957 is a high-severity path traversal vulnerability in AstrBotDevs AstrBot, published on 2 Jun 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
AstrBot is a large language model chatbot and development framework. A path traversal vulnerability present in versions 3.4.4 through 3.5.12 may lead to information disclosure, such as API keys for LLM providers, account passwords, and other sensitive data. The vulnerability has been addressed in Pull Request #1676 and is included in version 3.5.13. As a workaround, users can edit the `cmd_config.json` file to disable the dashboard feature as a temporary workaround. However, it is strongly recommended to upgrade to version v3.5.13 or later to fully resolve this issue.
Which versions are affected by CVE-2025-48957?
3 open source packages ship an affected version, including astrbot. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
astrbot PyPI | From 3.4.4 | 3.5.13 |
astrbot PyPI | From 3.4.4 | 3.5.13 |
astrbot PyPI | From 3.4.4 | 3.5.13 |
Products include Astrbot Astrbot.
How do I fix CVE-2025-48957?
Upgrade astrbot to 3.5.13 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2025-48957 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-48957 exists.
Other vulnerabilities in AstrBotDevs AstrBot
Sources
Also known as GHSA-cq37-g2qp-3c2p, PYSEC-2026-1196.