2.1

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-10212

CVE-2026-10212: AstrBot: Manipulation of astr_main_agent's session_id parameter leads to authorization bypass

A vulnerability was identified in AstrBotDevs AstrBot 4.24.2. This affects the function astr_main_agent of the file astrbot/core/astr_main_agent.py. Such manipulation of the argument session_id leads to authorization bypass. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-10212

CVE-2026-10212:

2.1

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

SSVC / BOD 26-04 ↗

Exploitation pocAutomatable NoTech Impact Partial

Select your environment

→SSVCDeferfix on upgrade

Runtime reachability resolves your actual outcome.Book a demo

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
AstrBot	pip	<= 4.24.2

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists in the _handle_webchat function within astrbot/core/astr_main_agent.py. The code unsafely parses the event.session_id by splitting it with a '!' delimiter and taking the last part as the session identifier. This allows an attacker to inject a victim's session ID into their own, leading to an authorization bypass. Specifically, an attacker can send a session ID in the format attacker_controlled_part!victim_session_id. The code will then incorrectly use victim_session_id for subsequent operations, such as renaming a chat session. The build_main_agent function is the orchestrator that calls _handle_webchat when the platform is 'webchat', making it a key part of the exploitation path. The analysis of the gist and the source code confirms this vulnerability.

Vulnerable functions

_handle_webchat

astrbot/core/astr_main_agent.py

The function `_handle_webchat` is vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability. It extracts a session ID from an `event.session_id` string by splitting it with '!' and taking the last element. An attacker can craft a malicious `session_id` like 'attacker_session!victim_session' to manipulate the `chatui_session_id` to be the victim's session ID. This allows the attacker to perform actions, such as renaming a session, on behalf of the victim.

build_main_agent

astrbot/core/astr_main_agent.py

The `build_main_agent` function is the entry point that, when handling a 'webchat' platform event, calls the vulnerable `_handle_webchat` function. An attacker would trigger this function to exploit the IDOR vulnerability in `_handle_webchat`.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.