The vulnerability exists in the Plugin Update Handler within AstrBotDevs AstrBot. The update_all_plugins function accepts download_url, download_urls, and proxy parameters without proper validation, enabling attackers to supply arbitrary URLs. This results in Server‑Side Request Forgery, where the AstrBot server will attempt to retrieve the crafted URLs, potentially exposing internal resources or allowing the execution of malicious payloads.

Affected instances are AstrBotDevs AstrBot deployments up to version 4.25.2. The flaw resides in the file astrbot/dashboard/routes/plugin.py and affects the update_plugin and update_all_plugins endpoints. Any installation using these components prior to a patch is vulnerable.

The CVSS score of 5.3 denotes moderate severity, while the EPSS < 1% indicates a low probability of exploitation at this time. However, the exploit is public and can be triggered remotely, and the flaw is not currently listed in CISA’s KEV catalog. Attackers could use this SSRF to reach internal network services or download malicious components, potentially leading to further compromise. The lack of immediate denial‑of‑service impact does not mitigate the threat to confidentiality and integrity of internal resources.