What is GHSA-jgf3-cr8w-g5h9?

GHSA-jgf3-cr8w-g5h9 is a security advisory published by GitHub Security Advisories with Low severity. A vulnerability has been found in AstrBotDevs AstrBot up to 4.25.5. This issue affects the...

Which CVE IDs does GHSA-jgf3-cr8w-g5h9 cover?

GHSA-jgf3-cr8w-g5h9 covers the following CVE IDs: CVE-2026-16076. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-jgf3-cr8w-g5h9?

GHSA-jgf3-cr8w-g5h9 has a CVSS v3 base score of 6.3, published by GitHub Security Advisories.

GHSA-jgf3-cr8w-g5h9LowCVSS 6.3

A vulnerability has been found in AstrBotDevs AstrBot up to 4.25.5. This issue affects the...

Vendor

GitHub Security Advisories

Published

July 18, 2026

Last Modified

July 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-16076 →

📋 Description

A vulnerability has been found in AstrBotDevs AstrBot up to 4.25.5. This issue affects the function OpenApiRoute.chat_send of the file astrbot/dashboard/routes/open_api.py of the component API. Such manipulation of the argument Username leads to authentication bypass by spoofing. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2026-16076
https://gist.github.com/YLChen-007/080ba55a71588dbbba3f27afed4c072c
https://vuldb.com/cve/CVE-2026-16076
https://vuldb.com/submit/852864
https://vuldb.com/vuln/379791
https://vuldb.com/vuln/379791/cti
https://github.com/advisories/GHSA-jgf3-cr8w-g5h9