CVE-2026-16074 is a server-side request forgery vulnerability affecting AstrBotDevs AstrBot up to version 4.25.2. The issue exists in the Plugin Update Handler, specifically in the update_plugin and update_all_plugins functions within astrbot/dashboard/routes/plugin.py. By manipulating the download_url, download_urls, or proxy parameters, an attacker can cause the server to perform unauthorized requests. The vulnerability can be exploited remotely without user interaction and requires low privileges. The vendor has not provided a fix or advisory, and the exploit code is publicly available.

Successful exploitation of this SSRF vulnerability could allow an attacker to make arbitrary requests from the vulnerable server, potentially accessing internal resources or services not otherwise exposed. The impact is rated medium with a CVSS score of 5.3, reflecting limited privileges required and low complexity of attack. There is no indication of privilege escalation or direct code execution from this vulnerability based on the available information.

No official fix or patch is currently available from the vendor, and the vendor has not responded to disclosure attempts. Users should monitor the vendor's channels for any future advisories or patches. Until a fix is released, avoid exposing the affected plugin update functionality to untrusted networks or users. Implement network-level controls to restrict outbound requests from the server to trusted destinations only, if possible. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.