AstrBot versions prior to 3.5.18 contain a critical vulnerability due to a hard-coded JWT signing key. This flaw allows attackers to bypass authentication and install malicious Python plugins, resulting in arbitrary command execution on the host. The vulnerability was patched in version 3.5.18 on the same day it was reported (2025-06-21). Public disclosure occurred later on 2025-11-14, by which time most instances had been updated.