Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability has been found in AstrBotDevs AstrBot up to 4.25.5. This issue affects the function OpenApiRoute.chat_send of the file astrbot/dashboard/routes/open_api.py of the component API. Such manipulation of the argument Username leads to authentication bypass by spoofing. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-16076 Authentication Bypass via Username Spoofing in AstrBotDevs AstrBot Up to 4.25.5 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-16076
Post summary
A brief reference to CVE‑2026‑16076, describing an authentication bypass via username spoofing in AstrBotDevs AstrBot versions up to 4.25.5, with only minimal details and no PoC, exploit, patch, or evidence of active exploitation.