This vulnerability affects the install_plugin_upload function in the astrbot/dashboard/routes/plugin.py file of AstrBotDevs AstrBot versions 4.22.0 and 4.22.1. The issue arises from improper handling of the File argument, resulting in a sandbox escape or bypass. The vulnerability can be exploited remotely without user interaction and has a CVSS 4.0 base score of 5.3, indicating medium severity. Although the exploit code is publicly available, no official patch or remediation has been released by the vendor as of the publication date.

Successful exploitation allows an attacker to bypass sandbox restrictions in the AstrBot application, potentially leading to unauthorized code execution or privilege escalation within the context of the application. This could compromise the integrity and security of the affected system. The vulnerability is remotely exploitable without user interaction, increasing its risk. However, no known exploits in the wild have been reported beyond the public exploit availability.

No official patch or remediation is currently available from the vendor. Users should monitor the vendor's communications for updates and apply any future patches promptly. Until a fix is released, consider restricting access to the install-upload endpoint and applying additional network-level controls to limit exposure. Review and harden sandbox configurations if possible to reduce risk.