File and Path Handling

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. AstrBot Has Path Traversal Vulnerability in /api/chat/get_fileCVE-2025-48957AstrBotDevs · CVSS 7.5 · 0.8% likely

   CWE-23

2. AstrBotDevs AstrBot API Endpoint delete path traversalCVE-2026-10213AstrBotDevs · CVSS 5.4 · 0.4% likely

   CWE-22

3. AstrBotDevs AstrBot File Upload chat.py post_file path traversalCVE-2026-8754AstrBotDevs · CVSS 6.3 · 0.4% likely

   CWE-22

4. AstrBotDevs AstrBot Filesystem Computer-Use Tool fs.py _normalize_rw_path link followingCVE-2026-16077AstrBotDevs · CVSS 5.3 · 0.2% likely

   CWE-59

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.