Vulnerabilities CVE-2026-16073

CVE-2026-16073

Medium

Open

TLP:CLEAR

AstrBotDevs AstrBot T2I Feature base.py NetworkRenderStrategy.render cross site scripting

NVD CVE.org

Critical Infrastructure

AI Analysis

No AI analysis yet.

Description

A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this issue is the function Star.text_to_image/NetworkRenderStrategy.render of the file astrbot/core/star/base.py of the component T2I Feature. The manipulation leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Details

CVSS Score: 5.1
EPSS Score ⓘ: 0.19%

9th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Confidence: 90%
Published: Jul 17, 2026
Last Modified: Jul 17, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.