CVE-2026-7579

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-7579
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-7579.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-7579
Aliases
Published
2026-05-01T11:30:15.357Z
Modified
2026-07-15T01:49:02.021447626Z
Severity
  • 5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
AstrBotDevs AstrBot Dashboard auth.py hard-coded credentials
Details

A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.16.0. This issue affects some unknown processing of the file astrbot/dashboard/routes/auth.py of the component Dashboard. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Database specific 
{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-259",
        "CWE-798"
    ],
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "4.4"
                },
                {
                    "last_affected": "4.4"
                }
            ]
        }
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/7xxx/CVE-2026-7579.json"
}
References

Affected packages

Git / github.com/astrbotdevs/astrbot

Affected ranges

Type
GIT
Repo
https://github.com/astrbotdevs/astrbot
Events
Introduced
7c3f5431ba432725ec23d215d2701b4396ceeef6
Last affected
fcd18503cbd59dab5883a9c96c7411547c978c55
Database specific 
{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "4.0"
        },
        {
            "last_affected": "4.0"
        },
        {
            "introduced": "4.1"
        },
        {
            "last_affected": "4.1"
        },
        {
            "introduced": "4.2"
        },
        {
            "last_affected": "4.2"
        },
        {
            "introduced": "4.3"
        },
        {
            "last_affected": "4.3"
        },
        {
            "introduced": "4.5"
        },
        {
            "last_affected": "4.5"
        },
        {
            "introduced": "4.6"
        },
        {
            "last_affected": "4.6"
        },
        {
            "introduced": "4.7"
        },
        {
            "last_affected": "4.7"
        },
        {
            "introduced": "4.8"
        },
        {
            "last_affected": "4.8"
        },
        {
            "introduced": "4.9"
        },
        {
            "last_affected": "4.9"
        },
        {
            "introduced": "4.10"
        },
        {
            "last_affected": "4.10"
        },
        {
            "introduced": "4.11"
        },
        {
            "last_affected": "4.11"
        },
        {
            "introduced": "4.12"
        },
        {
            "last_affected": "4.12"
        },
        {
            "introduced": "4.13"
        },
        {
            "last_affected": "4.13"
        },
        {
            "introduced": "4.14"
        },
        {
            "last_affected": "4.14"
        },
        {
            "introduced": "4.15"
        },
        {
            "last_affected": "4.15"
        },
        {
            "introduced": "4.16.0"
        },
        {
            "last_affected": "4.16.0"
        }
    ]
}

Affected versions

4.*
4.0
4.1
4.10
4.11
4.12
4.13
4.14
4.15
4.16.0
4.2
4.3
4.5
4.6
4.7
4.8
4.9
v4.*
v4.0.0
v4.1.0
v4.1.1
v4.1.2
v4.1.3
v4.1.4
v4.1.5
v4.1.6
v4.1.7
v4.10.0
v4.10.0-alpha.1
v4.10.0-alpha.2
v4.10.1
v4.10.2
v4.10.3
v4.10.4
v4.10.5
v4.10.6
v4.11.0
v4.11.1
v4.11.2
v4.11.3
v4.11.4
v4.12.0
v4.12.1
v4.12.2
v4.12.3
v4.12.4
v4.13.0
v4.13.1
v4.14.0
v4.14.1
v4.14.2
v4.14.3
v4.14.4
v4.14.5
v4.14.7
v4.15.0
v4.16.0
v4.2.0
v4.2.1
v4.3.0
v4.3.1
v4.3.2
v4.3.3
v4.3.5
v4.5.0
v4.5.1
v4.5.2
v4.5.3
v4.5.4
v4.5.5
v4.5.6
v4.5.7
v4.5.8
v4.6.0
v4.6.1
v4.7.0
v4.7.1
v4.7.2
v4.7.3
v4.7.4
v4.8.0
v4.9.0
v4.9.1
v4.9.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-7579.json"