CVE-2026-10210 | AstrBotDevs AstrBot 4.23.6 skill_manager.py _sanitize_prompt_description injection

SecurityVulns
Yanac

A vulnerability, which was classified as critical, was found in AstrBotDevs AstrBot 4.23.6. Affected by this vulnerability is the function _sanitize_prompt_description of the file astrbot/core/skills/skill_manager.py. The manipulation results in injection.

This vulnerability was named CVE-2026-10210. The attack may be performed from remote. In addition, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More