CVE-2026-16073 | AstrBotDevs AstrBot up to 4.25.2 T2I Feature base.py Star.text_to_image/NetworkRenderStrategy.render cross site scripting

July 17, 2026 Yanac

A vulnerability identified as problematic has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this issue is the function Star.text_to_image/NetworkRenderStrategy.render of the file astrbot/core/star/base.py of the component T2I Feature. The manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-16073. The attack is possible to be carried out remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More