A vulnerability was found in AstrBotDevs AstrBot up to 4.22.1. It has been declared as critical. The affected element is the function
post_data.get of the component API Endpoint. Such manipulation leads to server-side request forgery.
This vulnerability is listed as CVE-2026-6119. The attack may be performed from remote. In addition, an exploit is available.
The project was informed of the problem early through an issue report but has not responded yet.
