CVE-2026-16073
Received Received - Intake

Cross-Site Scripting in AstrBot T2I Feature

Publication date: 2026-07-17

Last updated on: 2026-07-17

Assigner: VulDB

Description
A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this issue is the function Star.text_to_image/NetworkRenderStrategy.render of the file astrbot/core/star/base.py of the component T2I Feature. The manipulation leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-17
Last Modified
2026-07-17
Generated
2026-07-18
AI Q&A
2026-07-17
EPSS Evaluated
N/A
NVD
CVE-2026-16073
EUVD
EUVD-2026-45244

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
astrbotdevs astrbot to 4.25.2 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a cross-site scripting (XSS) issue in AstrBot versions up to 4.25.2. It occurs in the text-to-image rendering feature where unescaped user-controlled text is inserted into HTML templates using unsafe syntax. Attackers can inject malicious scripts by exploiting this to break out of text containers, leading to script execution within the renderer context.

Detection Guidance

Check if AstrBot is installed and verify the version. Look for enabled T2I (text-to-image) features and remote rendering strategies. Inspect HTML templates for unescaped text using {{ text | safe }} syntax. Monitor network traffic for unusual script execution in rendered outputs.

Impact Analysis

The impact is limited to the renderer context where the T2I feature is used. An attacker could manipulate rendered output or execute scripts in the user's browser when viewing generated images. Stronger impacts like server-side code execution or file access were not confirmed.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by enabling cross-site scripting (XSS) attacks. XSS may lead to unauthorized data access or manipulation, violating GDPR's data protection requirements or HIPAA's safeguards for protected health information. The risk depends on whether the affected AstrBot component processes or displays sensitive data subject to these regulations.

Mitigation Strategies

Upgrade AstrBot to a version beyond 4.25.2 if available. Disable the T2I feature and remote rendering strategy if not required. Apply input validation to sanitize text before passing it to templates. Replace {{ text | safe }} with proper HTML escaping mechanisms like {{ text | escape }}.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-16073. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart