VulnSocial

CVE-2026-15501Disclosure

LOWCVSS 2.1 · LOW

Exploit discussion active in current signal (4 latest mentions)

Immediate actions

  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this issue is the function ToolsRoute.test_mcp_connection of the file astrbot/dashboard/routes/tools.py of the component MCP Test Endpoint. The manipulation of the argument mcp_server_config.url leads to server-side request forgery. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Back to dashboard
1.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-918

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Threat summary

  • Public PoC is present in monitored signal
  • 4 mentions across 1 observed day

What's happening

  • PoC mentioned or linked in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • 4 total mentions across 1 day

Deep dive

Activity timeline4 mentions / 1d
01234Mentions · 2026-07-12: 4PoC Mentioned / Linked · 2026-07-12: 1Technical Details · 2026-07-12: 207-12
Signal classification3 categories
Disclosure
250.0%
General
125.0%
PoC
125.0%
Referenced assets4 URLs
Full discourse4 posts
  • MalwareObserver@MalwareObserver
    PoC

    🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-15501](https://gist.github.com/YLChen-007/b68732c140fb11d844b214cf2db50a5a) A security ... https://gist.github.com/YLChen-007/b68732c140fb11d844b214cf2db50a5a #ZeroDay #PatchManagement #Vulnerability

    Post summary

    The tweet announces CVE‑2026‑15501 and links to a gist that likely contains PoC or detailed information, but it offers no evidence of active exploitation, patches, or technical details.

    0000057
    10 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-15501 A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this issue is the function ToolsRoute.test_mcp_connection of the file astr… https://www.cve.org/CVERecord?id=CVE-2026-15501 ----- Traducción: CVE-2026-15501 Se … http://infoflow.cloud`

    Post summary

    The message announces CVE-2026-15501, a vulnerability in AstrBotDevs AstrBot up to version 4.25.2, with minimal technical detail and a link to the CVE record.

    0000041
    92 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-15501 A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this issue is the function ToolsRoute.test_mcp_connection of the file astr… https://www.cve.org/CVERecord?id=CVE-2026-15501

    Post summary

    The post announces that CVE-2026-15501 was detected in AstrBotDevs AstrBot up to version 4.25.2, affecting the ToolsRoute.test_mcp_connection function, but it provides no further details on exploitation, patching, or active use.

    00000762
    57.8K followersView on X
  • SecNews@SecNews_GR
    Disclosure

    AstrBot MCP: Νέα SSRF ευπάθεια CVE-2026-15501 σε AI framework https://secn.ws/F1BFAj

    Post summary

    The post announces a newly disclosed SSRF vulnerability (CVE-2026-15501) affecting an AI framework.

    00000131
    7.0K followersView on X

Explore more

Back to dashboard