AstrBotDevs AstrBot versions 4.25.0 through 4.25.2 contain a server-side request forgery vulnerability in the Plugin Update Handler component. The vulnerability arises from improper validation of the download_url, download_urls, or proxy parameters in the update_plugin and update_all_plugins functions located in astrbot/dashboard/routes/plugin.py. An attacker can remotely manipulate these parameters to cause the server to make unintended requests, potentially accessing internal resources or services. The vulnerability is publicly known, but the vendor has not issued any response or patch. No known exploits in the wild have been reported.

Successful exploitation allows an attacker to induce the AstrBot server to make arbitrary HTTP requests to internal or external systems. This can lead to information disclosure or interaction with internal services not directly accessible to the attacker. The vulnerability does not require user interaction and can be triggered remotely with low attack complexity. The overall impact is rated medium based on the CVSS 4.0 score of 5.3.

No official fix or patch is currently available from the vendor, and the vendor has not responded to disclosure attempts. Users should monitor vendor channels for any future updates or patches. Until a fix is released, restricting network access to the server and filtering or validating inputs related to plugin update URLs may reduce exposure. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.