A vulnerability classified as critical has been found in AstrBot 3.5.22. This affects the function
_encode_image_bs64 of the file entities.py. Performing manipulation results in path traversal.
This vulnerability is known as CVE-2025-57697. Access to the local network is required for this attack. No exploit is available.
