CVE-2026-6118 Scanner
CVE-2026-6118 Scanner - Command Injection vulnerability in AstrBot
Used 2.8k times · 4.2k assets checked · domain, subdomain, ipv4
CVE
CVE-2026-6118
2.1
CVSSmedium
Exploitable remotely over the internet · low-privilege account sufficient.
Description
A vulnerability was determined in AstrBotDevs AstrBot up to 4.22.1. Impacted is the function add_mcp_server of the file astrbot/dashboard/routes/tools.py of the component MCP Endpoint. This manipulation of the argument command causes command injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
Attack Vector
Network
Privileges Req.
Low
User Interaction
None
astrbot
Updated Nov 6, 2026View on NVD →
S4E scanner
CVE history: astrbot
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →