Vulnerability · Published Jun 1, 2026 · Assigned by VulDB

CVE-2026-10210AstrBotDevs AstrBot skill_manager.py _sanitize_prompt_description injection

Medium 6.3

In plain English

A medium-severity injection in AstrBot from AstrBotDevs. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities).

Severity (CVSS 3.1)6.3Medium

Exploit odds (30 days)0.2%top 86.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was found in AstrBotDevs AstrBot 4.23.6. Affected by this vulnerability is the function _sanitize_prompt_description of the file astrbot/core/skills/skill_manager.py. The manipulation results in injection. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
AstrBotDevs	AstrBot	4.23.6

Weakness: CWE-74, CWE-707 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

References

VDB-367489 | AstrBotDevs AstrBot skill_manager.py _sanitize_prompt_description injection vdb-entry, technical-description
VDB-367489 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
CVE-2026-10210 | CVE Analysis and Report third-party-advisory
Submit #821920 | AstrBotDevs AstrBot 4.23.6 Prompt Injection (CWE-74) third-party-advisory
https://gist.github.com/YLChen-007/f9d45a9c68b15a382677a820ee881bbb exploit