AstrBot <= 4.22.1 - Command Injection
CVE-2026-6118
Verified
Description
AstrBot versions up to and including 4.22.1 contain a command injection vulnerability in the MCP server configuration endpoint. The /api/tools/mcp/add endpoint accepts arbitrary command and args fields that are passed directly to subprocess execution during the connection test, without any validation or allowlist enforcement. An attacker with dashboard access can execute arbitrary system commands with AstrBot process privileges.
Severity
High
CVSS Score
8.8
Exploit Probability
3%
Affected Product
AstrBot
Published Date
April 12, 2026
Template Author
jyoti369
CVE-2026-6118.yaml
8.8Score
CVSS Metrics
CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVE ID:
cve-2026-6118
CWE ID:
cwe-94
Remediation Steps
Upgrade AstrBot to version 4.22.2 or later which introduces command allowlisting and validation. Change default dashboard credentials immediately.