A flaw in AstrBotDevs AstrBot 4.23.6 allows a remote attacker to manipulate the *Name* argument of the /api/skills/delete endpoint, creating a path traversal condition. This can lead to reading or overwriting files outside the intended directory, potentially exposing sensitive data or enabling further exploitation. The vulnerability is actionable from a remote context and a public exploit is available, indicating that attackers can attempt this attack without needing local access.

AstrBotDevs AstrBot product, version 4.23.6, is affected. No other versions are listed as impacted, and the path involved is explicitly /api/skills/delete.

The CVSS score of 5.3 places the vulnerability in the medium range; the EPSS score is not available, and it is not included in the CISA KEV catalog. The vulnerability can be exploited remotely and the publicly released exploit lowers the barrier to attack. The lack of an official patch or response from the vendor increases the risk for systems that have not applied mitigations.