CVE-2026-15499 in AstrBot
Summary
by MITRE • 07/12/2026
A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.2. Affected is the function FutureTaskTool.call of the file astrbot/core/tools/cron_tools.py of the component Scheduled Task Handler. Performing a manipulation of the argument payload["note"] results in improper authorization. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Analysis
by VulDB Data Team • 07/12/2026
The vulnerability identified in AstrBotDevs AstrBot version 4.25.2 represents a critical authorization flaw within the Scheduled Task Handler component that exposes the system to remote exploitation. This security weakness resides in the FutureTaskTool.call function located in astrbot/core/tools/cron_tools.py, where improper validation of user-supplied input creates a pathway for unauthorized access. The specific vulnerability manifests when manipulating the payload["note"] argument, which bypasses expected authorization checks and allows attackers to execute arbitrary tasks with elevated privileges. This flaw directly impacts the integrity and confidentiality of the system's scheduled operations, potentially enabling attackers to manipulate or execute malicious code through the task scheduling mechanism.
The technical exploitation of this vulnerability follows a well-established pattern that aligns with common remote code execution vectors in web applications. The improper authorization check occurs during input processing within the cron_tools.py module, where the payload["note"] parameter is not adequately validated or sanitized before being processed by the FutureTaskTool.call function. This type of flaw typically falls under CWE-285, which addresses improper authorization issues, and can be categorized as a privilege escalation vulnerability within the ATT&CK framework under T1078. The vulnerability's remote exploitability means that attackers do not require physical access or local system credentials to leverage this weakness, making it particularly dangerous for systems exposed to untrusted networks.
The operational impact of this vulnerability extends beyond simple unauthorized access, as it fundamentally compromises the security model of the AstrBot platform. Attackers who successfully exploit this flaw can manipulate scheduled tasks to execute arbitrary commands, potentially leading to complete system compromise, data exfiltration, or disruption of legitimate operations. The fact that a public exploit has been released significantly increases the risk profile, as it eliminates the need for advanced technical skills to carry out attacks. Organizations running affected versions of AstrBot are exposed to immediate threats from threat actors who may have already deployed automated exploitation tools against vulnerable systems, particularly in environments where the application is accessible from external networks.
Mitigation strategies for this vulnerability must address both immediate remediation and long-term security improvements within the AstrBot platform. The primary recommendation involves implementing proper input validation and authorization checks for all user-supplied parameters, particularly within the cron_tools.py module where the vulnerability originates. Organizations should immediately upgrade to a patched version of AstrBot if available, while also implementing network segmentation to limit access to the affected components. Additional defensive measures include monitoring scheduled task execution logs for anomalous behavior, implementing web application firewalls to detect and block malicious payloads, and conducting thorough security audits of all input processing functions. The vulnerability highlights the importance of proper authorization controls in scheduled task systems and underscores the need for comprehensive code review processes that specifically target input validation and privilege management mechanisms.