This vulnerability affects the install_plugin_upload function in the astrbot/dashboard/routes/plugin.py file of AstrBotDevs AstrBot versions 4.22.0 and 4.22.1. The flaw arises from improper handling of the File argument, resulting in a sandbox escape or bypass issue. The vulnerability is remotely exploitable without user interaction and has a CVSS 4.0 base score of 5.3, indicating medium severity. The project has been informed but has not issued a fix or official response. No patch or mitigation guidance is currently available from the vendor.

Successful exploitation could allow an attacker to bypass sandbox restrictions remotely via the install-upload endpoint, potentially leading to unauthorized actions within the application environment. The CVSS vector indicates low privileges required but no user interaction needed, with limited confidentiality, integrity, and availability impact. There are no confirmed active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider restricting access to the install-upload endpoint and monitor for suspicious activity as a temporary measure until an official patch or mitigation is provided.