CVE-2026-7579
AstrBotDevs AstrBot Dashboard auth.py hard-coded credentials
CVSS Score
7.3
EPSS Score
0.0%
EPSS Percentile
0th
A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.16.0. This issue affects some unknown processing of the file astrbot/dashboard/routes/auth.py of the component Dashboard. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
| CWE | CWE-798 CWE-259 |
| Vendor | astrbotdevs |
| Product | astrbot |
| Published | May 1, 2026 |
Stay Ahead of the Next One
Get instant alerts for astrbotdevs astrbot
Be the first to know when new high vulnerabilities affecting astrbotdevs astrbot are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
AstrBotDevs / AstrBot
4.0 4.1 4.2 4.3 4.4 4.5 4.6 4.7 4.8 4.9 4.10 4.11 4.12 4.13 4.14 4.15 4.16.0
References
vuldb.com: https://vuldb.com/vuln/360420 vuldb.com: https://vuldb.com/vuln/360420/cti vuldb.com: https://vuldb.com/submit/793437 github.com: https://github.com/Dave-gilmore-aus/security-advisories/blob/main/AstrBot-Security-Advisory github.com: https://github.com/AstrBotDevs/AstrBot/security/advisories/GHSA-vrqm-xcfv-286r github.com: https://github.com/AstrBotDevs/AstrBot/
Credits
🔍 davidgilmore (VulDB User) VulDB CNA Team