CVE-2026-17529
Received Received - Intake

Incorrect Authorization in AstrBot via req.func_tool Parameter

Publication date: 2026-07-27

Last updated on: 2026-07-27

Assigner: VulDB

Description
A vulnerability was identified in AstrBotDevs AstrBot up to 4.25.5. Affected is an unknown function of the file astrbot/core/astr_main_agent.py. The manipulation of the argument req.func_tool leads to incorrect authorization. The attack may be initiated remotely. The exploit is publicly available and might be used. The identifier of the patch is d23011262e8e75e1ec41b0f1f0091493a022327e. It is suggested to install a patch to address this issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-27
Last Modified
2026-07-27
Generated
2026-07-27
AI Q&A
2026-07-27
EPSS Evaluated
N/A
NVD
CVE-2026-17529
EUVD
EUVD-2026-49322

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
astrbotdevs astrbot to 4.25.5 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
CWE-285 The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a policy bypass in AstrBot where a persona configured to disable all tools (tools=[]) can still re-expose built-in web search tools. The issue occurs in astrbot/core/astr_main_agent.py due to improper tool assembly order. Persona-level tool restrictions are applied first but later overridden when optional features like web search are enabled.

Detection Guidance

To detect this vulnerability, inspect the AstrBot configuration files, particularly astrbot/core/astr_main_agent.py, for improper tool assembly order. Check if persona-level tool restrictions are overridden by features like web search. Verify tool exposure via Dashboard or API endpoints like /api/v1/chat.

Impact Analysis

An attacker could remotely exploit this to invoke unauthorized tools, such as web search functions, even when a persona is configured to restrict all tools. This could lead to unintended data exposure or unauthorized actions through the AstrBot interface.

Compliance Impact

This vulnerability could lead to unauthorized data access or processing, potentially violating GDPR (data protection) or HIPAA (health information privacy) by exposing sensitive data through unrestricted tool usage.

Mitigation Strategies

Apply the provided patch with commit hash d23011262e8e75e1ec41b0f1f0091493a022327e. Update AstrBot to a version beyond 4.25.5. Review and restrict tool configurations in persona settings to prevent unauthorized exposure of tools like web search.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-17529. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart