This vulnerability in AstrBotDevs AstrBot 4.23.6 involves injection via the _sanitize_prompt_description function in astrbot/core/skills/skill_manager.py. The injection flaw can be exploited remotely without user interaction or privileges beyond low-level access. The CVSS 4.0 base score is 5.3 (medium severity), reflecting network attack vector, low complexity, no privileges required, and limited impact on confidentiality, integrity, and availability. The vendor has been contacted but has not issued any patch or mitigation. The exploit has been publicly disclosed, increasing the risk of exploitation.

Successful exploitation could allow an attacker to inject malicious input remotely, potentially leading to unauthorized code execution or manipulation within the affected function. The impact is rated medium due to limited confidentiality, integrity, and availability impact as per CVSS 4.0 metrics. There are no known exploits in the wild at this time, but public exploit code exists.

No official patch or remediation is currently available from the vendor. Since the vendor has not responded and no temporary fixes are documented, users should monitor official channels for updates. Until a fix is released, consider restricting network access to the affected service and applying any available input validation or filtering controls at the application or network level to mitigate injection risks.