OpenApiRoute.get_chat_sessions is a session‑listing endpoint in AstrBot. By manipulating the Username argument, an attacker can bypass the authorization checks and obtain a list of chat sessions without proper privileges, which could contain sensitive data. The vulnerability is identified as an authorization bypass (CWE‑285) and a privilege misuse issue (CWE‑639).

AstrBotDevs AstrBot versions up to 4.25.5 are affected. Any installation of AstrBot that includes the open_api.py session‑listing endpoint before a fix will be vulnerable. The flaw exists in the astrbot/dashboard/routes/open_api.py file and impacts all environments that expose the API endpoint to network traffic.

CVSS score of 5.3 indicates moderate severity, with low exploitation probability as reflected by an EPSS score of <1% and no listing in the CISA KEV catalog. The flaw can be exploited remotely by sending crafted HTTP requests to the open_api endpoint; an attacker only needs to supply a manipulated Username value to bypass authentication. Since the exploit is publicly available, organizations should consider upgrading or mitigating as soon as possible.