CVE-2025-55449

Summary

AstrBotDevs AstrBot 3.5.15 has Advanced_System_for_Text_Response_and_Bot_Operations_Tool as the hardcoded private key used to sign a JWT.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://github.com/AstrBotDevs/AstrBot
• https://github.com/Marven11/CVE-2025-55449-AstrBot-RCE

• ←Previous
• Next→