Which products and versions are affected by CVE-2026-6118?

Affected: Astrbot. The full list is in the CVE brief.

Is CVE-2026-6118 being exploited in the wild?

It is not listed in any known-exploited vulnerabilities catalog.

Is CVE-2026-6118 in the CISA KEV catalog?

No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.

Is there a public exploit for CVE-2026-6118?

Public exploit code is available.

Is there a fix for CVE-2026-6118?

No fixed version is listed yet; check the vendor advisory for mitigations.

How urgently should CVE-2026-6118 be patched?

Brandefense priority: routine patching, as no exploitation is known and its severity is moderate or low.

Request A Demo

Vulnerability Intelligence

CVE-2026-6118

LowPublic exploit

AstrBotDevs AstrBot MCP Endpoint tools.py add_mcp_server command injection

Published Apr 12, 2026 · Updated Aug 12, 2026

Key Facts

Routine patching

CVE-2026-6118 is a low-severity vulnerability (CVSS 2.1 v4) affecting Astrbot.
It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
EPSS estimates a 3.5% probability of exploitation in the next 30 days.
No fixed version is listed yet; check the vendor advisory for mitigations.
Brandefense priority: routine patching, as no exploitation is known and its severity is moderate or low.

CVSS v4

2.1

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS (30-day exploit likelihood)

3.5%

Higher than 88.9% of all scored CVEs

Exploited in the wild

No known

Not in a known-exploited catalog

Public exploit code

Available

Proof-of-concept or weaponized module

Get the full CVE-2026-6118 brief as a PDF

Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.

Description

A vulnerability was determined in AstrBotDevs AstrBot up to 4.22.1. Impacted is the function add_mcp_server of the file astrbot/dashboard/routes/tools.py of the component MCP Endpoint. This manipulation of the argument command causes command injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

Affected Products

1 affected entries in total

Product	Affected versions	Fixed in
AstrbotAstrbot	See advisory	n/a

Timeline

Publicly disclosed
Apr 12, 2026
Last updated
Aug 12, 2026

Weakness Type

CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')

References

2 more references in the full CVE brief

FAQ

Common Questions.

A vulnerability was determined in AstrBotDevs AstrBot up to 4.22.1.
Affected: Astrbot. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
No fixed version is listed yet; check the vendor advisory for mitigations.
Brandefense priority: routine patching, as no exploitation is known and its severity is moderate or low.

Is CVE-2026-6118 Running On Your Attack Surface?

Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.