CVE-2026-10210 | AstrBotDevs AstrBot 4.23.6 skill_manager.py _sanitize_prompt_description injection

A vulnerability, which was classified as critical, was found in AstrBotDevs AstrBot 4.23.6. Affected by this vulnerability is the function _sanitize_prompt_description of the file astrbot/core/skills/skill_manager.py. The manipulation results in injection.

This vulnerability was named CVE-2026-10210. The attack may be performed from remote. In addition, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.