CVE-2025-55449

HIGH EPSS 19.8%
Published May 8, 20261mo ago · Modified Jun 17, 20262w ago
7.3 CVSS 3.1
High
Find Similar
Published May 8, 2026 1mo ago
Last Modified Jun 17, 2026 2w ago

Description

AstrBotDevs AstrBot 3.5.15 has Advanced_System_for_Text_Response_and_Bot_Operations_Tool as the hardcoded private key used to sign a JWT.

CVSS Details

Base Score
7.3
Exploitability
3.9
Impact
3.4
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality Low
Integrity Low
Availability Low

Threat Intelligence

EPSS Exploit Probability
19.8% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 1

CWE-321

Affected Products 1

VendorProductVersionRange
astrbotastrbot3.5.15any

References 2

  • github.com https://github.com/AstrBotDevs/AstrBot
    Product
  • github.com https://github.com/Marven11/CVE-2025-55449-AstrBot-RCE
    ExploitThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.