This vulnerability in AstrBotDevs AstrBot (versions 4.25.0 through 4.25.5) arises from improper authorization checks related to the manipulation of the req.func_tool argument in the astrbot/core/astr_main_agent.py file. The flaw allows an attacker to bypass authorization controls remotely, potentially leading to unauthorized actions. Although an exploit is publicly available, there are no confirmed reports of exploitation in the wild. A patch exists as identified by commit d23011262e8e75e1ec41b0f1f0091493a022327e, but no official remediation level or vendor advisory is provided in the data.

The vulnerability allows remote attackers to bypass authorization controls by manipulating a function argument, potentially enabling unauthorized access or actions within AstrBot. The CVSS 4.0 base score is 5.3 (medium), indicating a moderate impact with network attack vector, low complexity, no privileges required, and no user interaction needed. Confidentiality, integrity, and availability impacts are all low.

A patch identified by commit d23011262e8e75e1ec41b0f1f0091493a022327e is suggested to address this vulnerability. Since no official vendor advisory or remediation level is provided, it is recommended to apply this patch promptly to mitigate the risk. Monitor the vendor's official channels for confirmation and updated remediation guidance.