This vulnerability in AstrBotDevs AstrBot up to version 4.25.5 involves the _normalize_rw_path function within the filesystem computer-use tool component (file astrbot/core/tools/computer_tools/fs.py). An attacker with local access can manipulate the function to perform link following, potentially leading to unintended filesystem access or behavior. The exploit code has been publicly disclosed. The vendor was notified but has not provided any response or fix. No official remediation or patch is currently documented.

The vulnerability allows an attacker with local access and low privileges to manipulate filesystem path normalization to follow symbolic links. This could lead to unauthorized access or modification of files outside intended directories. The CVSS 4.8 score reflects a medium impact with low attack complexity and no required user interaction. Since exploitation requires local access, remote exploitation is not feasible based on current information.

No official patch or remediation is currently available from the vendor. Since the vendor has not responded and no fix is documented, users should restrict local access to trusted users only and monitor for suspicious local activity. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance if it becomes available.