<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: astrbot</title><description>Every new CVE for astrbot.</description><link>https://agentprime.io/</link><item><title>CVE-2026-17530: AstrBotDevs AstrBot Subagent astr_agent_tool_exec.py _build_handoff_toolset authorization</title><link>https://agentprime.io/advisories/CVE-2026-17530/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-17530/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 27 Jul 2026 15:45:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-17529: AstrBotDevs AstrBot astr_main_agent.py authorization</title><link>https://agentprime.io/advisories/CVE-2026-17529/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-17529/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 27 Jul 2026 15:15:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-16077: AstrBotDevs AstrBot Filesystem Computer-Use Tool fs.py _normalize_rw_path link following</title><link>https://agentprime.io/advisories/CVE-2026-16077/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16077/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 18 Jul 2026 06:45:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-16076: AstrBotDevs AstrBot API open_api.py OpenApiRoute.chat_send authentication spoofing</title><link>https://agentprime.io/advisories/CVE-2026-16076/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16076/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 18 Jul 2026 05:30:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-16075: AstrBotDevs AstrBot session-listing Endpoint open_api.py OpenApiRoute.get_chat_sessions authorization</title><link>https://agentprime.io/advisories/CVE-2026-16075/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16075/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 18 Jul 2026 04:00:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-16074: AstrBotDevs AstrBot Plugin Update plugin.py update_all_plugins server-side request forgery</title><link>https://agentprime.io/advisories/CVE-2026-16074/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16074/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 17 Jul 2026 20:15:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-16073: AstrBotDevs AstrBot T2I Feature base.py NetworkRenderStrategy.render cross site scripting</title><link>https://agentprime.io/advisories/CVE-2026-16073/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16073/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 17 Jul 2026 18:15:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-15501: AstrBotDevs AstrBot MCP Test Endpoint tools.py ToolsRoute.test_mcp_connection server-side request forgery</title><link>https://agentprime.io/advisories/CVE-2026-15501/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-15501/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 12 Jul 2026 12:30:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-15500: AstrBotDevs AstrBot market_list Endpoint plugin.py get_online_plugins server-side request forgery</title><link>https://agentprime.io/advisories/CVE-2026-15500/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-15500/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 12 Jul 2026 12:00:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-15499: AstrBotDevs AstrBot Scheduled Task cron_tools.py FutureTaskTool.call improper authorization</title><link>https://agentprime.io/advisories/CVE-2026-15499/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-15499/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 12 Jul 2026 11:45:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-10213: AstrBotDevs AstrBot API Endpoint delete path traversal</title><link>https://agentprime.io/advisories/CVE-2026-10213/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-10213/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 01 Jun 2026 01:45:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-10211: AstrBotDevs AstrBot fs.py _normalize_rw_path authorization</title><link>https://agentprime.io/advisories/CVE-2026-10211/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-10211/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 01 Jun 2026 01:15:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-10210: AstrBotDevs AstrBot skill_manager.py _sanitize_prompt_description injection</title><link>https://agentprime.io/advisories/CVE-2026-10210/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-10210/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 01 Jun 2026 01:00:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-6119: AstrBotDevs AstrBot API Endpoint post_data.get server-side request forgery</title><link>https://agentprime.io/advisories/CVE-2026-6119/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-6119/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 12 Apr 2026 05:00:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-6118: AstrBotDevs AstrBot MCP Endpoint tools.py add_mcp_server command injection</title><link>https://agentprime.io/advisories/CVE-2026-6118/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-6118/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 12 Apr 2026 04:45:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-6117: AstrBotDevs AstrBot install-upload Endpoint plugin.py install_plugin_upload sandbox</title><link>https://agentprime.io/advisories/CVE-2026-6117/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-6117/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 12 Apr 2026 04:30:12 GMT</pubDate><category>CVE</category></item></channel></rss>