Description
A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this issue is the function ToolsRoute.test_mcp_connection of the file astrbot/dashboard/routes/tools.py of the component MCP Test Endpoint. The manipulation of the argument mcp_server_config.url leads to server-side request forgery. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-07-12
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

AstrBotDevs AstrBot up to version 4.25.2 contains a server‑side request forgery vulnerability in the function ToolsRoute.test_mcp_connection located in astrbot/dashboard/routes/tools.py. The vulnerability is classified as CWE‑918. The flaw arises from unchecked manipulation of the mcp_server_config.url argument, allowing an attacker to specify arbitrary URLs for the application to request.

Affected Systems

The affected vendor is AstrBotDevs and the product is AstrBot, versions up to 4.25.2. No other product versions are currently listed as vulnerable.

Risk and Exploitability

The vulnerability is exploitable remotely through the exposed ToolsRoute.test_mcp_connection endpoint. This SSRF flaw corresponds to CWE‑918. The SSRF flaw permits the application to make outbound requests to arbitrary URLs supplied by an attacker. The CVSS score of 5.3 indicates a moderate severity, while the EPSS score of < 1% indicates a very low probability of exploitation. The vulnerability is not listed in the catalog.

Generated by OpenCVE AI on August 1, 2026 at 11:07 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update AstrBot to the latest available release that addresses the SSRF flaw (CWE‑918), ensuring the mictcp_connection endpoint until an official patch is available.
  • Implement input validation or a whitelist for URLs accepted by the MCP test endpoint to block unexpected or internal addresses, thereby mitigating the CWE‑918 SSRF flaw.
  • Apply network segmentation or firewall rules that prevent the application from making outbound requests to internal IP ranges.

Generated by OpenCVE AI on August 1, 2026 at 11:07 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 15 Jul 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sun, 12 Jul 2026 12:45:00 +0000

Type Values Removed Values Added
Description A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this issue is the function ToolsRoute.test_mcp_connection of the file astrbot/dashboard/routes/tools.py of the component MCP Test Endpoint. The manipulation of the argument mcp_server_config.url leads to server-side request forgery. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Title AstrBotDevs AstrBot MCP Test Endpoint tools.py ToolsRoute.test_mcp_connection server-side request forgery
First Time appeared Astrbot
Astrbot astrbot
Weaknesses CWE-918
CPEs cpe:2.3:a:astrbot:astrbot:*:*:*:*:*:*:*:*
Vendors & Products Astrbot
Astrbot astrbot
References
Metrics cvssV2_0

{'score': 6.5, 'vector': 'AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 6.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Astrbot Astrbot
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-07-15T16:05:35.347Z

Reserved: 2026-07-11T12:42:07.168Z

Link: CVE-2026-15501

cve-icon Vulnrichment

Updated: 2026-07-15T16:05:15.417Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-01T11:15:03Z

Weaknesses
  • CWE-918

    Server-Side Request Forgery (SSRF)