The vulnerability (CVE-2026-16077) affects the _normalize_rw_path function in astrbot/core/tools/computer_tools/fs.py of AstrBot up to version 4.25.5. It involves a manipulation that results in link following, which is a form of symbolic link (symlink) attack categorized under CWE-59. The attack vector requires local access with low privileges and no user interaction. The vendor has not provided a response or patch. Public exploit information is available, but no known exploits in the wild have been reported.

An attacker with local access can manipulate the _normalize_rw_path function to follow symbolic links, potentially leading to unauthorized file system access or modification. The impact is limited by the requirement for local access and the low severity rating. No remote exploitation or privilege escalation is indicated.

No official fix or patch is currently available from the vendor. Since the vendor did not respond and no patch links are provided, users should restrict local access to trusted users only and monitor for suspicious local activity. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance if it becomes available.