Eric-A

**Name of the Vulnerable Software and Affected Versions** AstrBotDevs AstrBot versions prior to 4.25.3 **Description** An improper authorization issue exists in the Scheduled Task Handler component within the `FutureTaskTool.call()` function of the `astrbot/core/tools/cron tools.py` file. A remote attacker can exploit this by manipulating the `payload["note"]` variable, allowing for unauthorized access or actions. **Recommendations** Update AstrBotDevs AstrBot to a version newer than 4.25.2. As a temporary mitigation, restrict access to the `FutureTaskTool.call()` function.

**Name of the Vulnerable Software and Affected Versions** AstrBotDevs AstrBot versions prior to 4.25.3 **Description** An issue exists in the MCP Test Endpoint component within the `ToolsRoute.test mcp connection()` function located in the `astrbot/dashboard/routes/tools.py` file. A remote attacker can manipulate the `mcp server config.url` argument to perform server-side request forgery (SSRF), a technique where the server is coerced into making unauthorized requests to internal or external resources. **Recommendations** Update AstrBotDevs AstrBot to version 4.25.3 or later. As a temporary mitigation, restrict access to the `ToolsRoute.test mcp connection()` function.

**Name of the Vulnerable Software and Affected Versions** AstrBotDevs AstrBot versions prior to 4.25.3 **Description** A server-side request forgery (SSRF) exists in the `market list` endpoint. This occurs within the `get online plugins()` function located in the `astrbot/dashboard/routes/plugin.py` file. A remote attacker can trigger this issue by manipulating the `custom registry` argument, allowing the server to make unauthorized requests. **Recommendations** Update AstrBotDevs AstrBot to a version newer than 4.25.2. As a temporary mitigation, restrict access to the `market list` endpoint or avoid using the `custom registry` argument until the software is updated.

**Name of the Vulnerable Software and Affected Versions** NousResearch hermes-agent versions prior to 2026.5.17 **Description** A path traversal issue exists in the Live Webhook Endpoint component within the `extract media()` function of the `gateway/platforms/base.py` file. This flaw allows a remote attacker to perform a manipulation that enables access to files or directories outside the intended folder. **Recommendations** Update to a version later than 2026.5.16. As a temporary workaround, restrict access to the `extract media()` function until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** NousResearch hermes-agent versions prior to 2026.4.31 **Description** A weakness in the HTTP API component allows a remote attacker to cause a denial of service. The issue exists within the `AIAgent.run conversation()` function located in the `run agent.py` file, where improper handling of the `todos` argument enables the attack. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `AIAgent.run conversation()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** NousResearch hermes-agent versions prior to 0.15.3 **Description** An improper authentication issue exists within the Discord Platform Integration component. The flaw is located in the `DiscordAdapter. is allowed user()` function within the `gateway/platforms/discord.py` file. This allows a remote attacker to bypass authentication, although the attack is characterized by high complexity and is difficult to exploit. **Recommendations** Update NousResearch hermes-agent to a version newer than 0.15.2. As a temporary workaround, restrict access to the `DiscordAdapter. is allowed user()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** NousResearch hermes-agent versions prior to 0.15.3 **Description** A security flaw exists that allows for the failure of protection mechanisms. This issue can be exploited remotely through the `shell.exec()` function located in the `tui gateway/server.py` file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the `shell.exec()` function in the `tui gateway/server.py` file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** NousResearch hermes-agent versions prior to 2026.4.31 **Description** An issue exists in the Streaming Reasoning Tag Filter component within the `GatewayStreamConsumer. filter and accumulate()` function located in the `gateway/stream consumer.py` file. This flaw results in the improper handling of case sensitivity, which can be triggered remotely. The attack complexity is high and exploitability is considered difficult. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** zhayujie chatgpt-on-wechat versions prior to 2.0.9 **Description** A weakness in the Bash Tool component allows for remote OS command injection. This occurs within the ` get safety warning()` function located in the `agent/tools/bash/bash.py` file. OS command injection is a flaw that allows an attacker to execute arbitrary operating system commands on the server. **Recommendations** Upgrade to version 2.0.9. As a temporary workaround, restrict the use of the ` get safety warning()` function in the Bash Tool component.

**Name of the Vulnerable Software and Affected Versions** AstrBot version 4.23.6 **Description** A remote injection issue exists in the ` sanitize prompt description()` function within the `astrbot/core/skills/skill manager.py` file. This flaw allows an attacker to perform injection attacks remotely. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the ` sanitize prompt description()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** AstrBotDevs AstrBot version 4.23.6 **Description** An issue exists in the ` normalize rw path()` function within the `astrbot/core/tools/computer tools/fs.py` file. This flaw allows for incorrect authorization and can be triggered remotely. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the ` normalize rw path()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** AstrBotDevs AstrBot version 4.24.2 **Description** An authorization bypass exists that can be triggered remotely. The issue occurs within the `astr main agent()` function located in the `astrbot/core/astr main agent.py` file, where manipulation of the `session id` argument allows an attacker to bypass security checks. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `astr main agent()` function or monitor the `session id` argument for suspicious manipulation.

**Name of the Vulnerable Software and Affected Versions** AstrBotDevs AstrBot version 4.23.6 **Description** A flaw in the API Endpoint component allows a remote attacker to perform path traversal, which is a technique used to access files and directories that are stored outside the web root folder. This occurs through the manipulation of the `Name` argument within the '/api/skills/delete' endpoint. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the `Name` parameter in the '/api/skills/delete' endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** AstrBotDevs AstrBot versions prior to 4.23.6 **Description** A path traversal issue exists in the File Upload Handler component within the `post file()` function of the `astrbot/dashboard/routes/chat.py` file. This occurs when the `filename` argument is manipulated, allowing a remote attacker to perform the attack. **Recommendations** Upgrade to version 4.23.6.

**Name of the Vulnerable Software and Affected Versions** FlowiseAI Flowise versions prior to 3.0.13 **Description** An issue exists in the 'Endpoint' component within the `verify()` function of the `packages/server/src/enterprise/services/account.service.ts` file. Manipulation of this function can lead to information disclosure. This flaw allows for remote exploitation, although it is characterized by high complexity and difficult exploitability. **Recommendations** Update to a version later than 3.0.12. As a temporary workaround, restrict access to the `verify()` function in the `packages/server/src/enterprise/services/account.service.ts` file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** FlowiseAI Flowise versions prior to 3.0.13 **Description** A weakness in the User Controller Handler component allows for remote authorization bypass. This occurs through the manipulation of the `userId`, `organizationId`, `workspaceId`, or `email` arguments. **Recommendations** Upgrade the affected component to a version later than 3.0.12.

**Name of the Vulnerable Software and Affected Versions** FlowiseAI Flowise versions prior to 3.0.13 **Description** A security flaw in the API Response Handler component allows for remote information disclosure. The issue exists within the `Login()` function located in the `packages/server/src/enterprise/services/account.service.ts` file. This attack is characterized by high complexity and is difficult to exploit. **Recommendations** Upgrade to a version later than 3.0.12. As a temporary workaround, restrict access to the `Login()` function until the update is applied.

**Name of the Vulnerable Software and Affected Versions** serge-chat versions prior to 1.4TB **Description** A flaw in the Model API Endpoint allows remote attackers to bypass authentication. This issue exists within the `download model` and `delete model` functions located in the 'api/src/serge/routers/model.py' file. Exploitation of this weakness can lead to unauthorized actions, including the deletion of models, and has been observed in real-world incidents. **Recommendations** Update to a version later than 1.4TB. As a temporary workaround, restrict access to the `download model` and `delete model` functions in the Model API Endpoint to minimize the risk of exploitation.