CVE-2025-55449highCWE-321

CVE-2025-55449

41Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 7.3epss 0.3%

from disclosure to weapon0 days

Published on NVDMay 8

1st PoCNov 11

exploitation probability

0.3%top 80% of all CVEs

observed exploitation

nono source reports it

2 public exploit(s)

AstrBotDevs AstrBot 3.5.15 has Advanced_System_for_Text_Response_and_Bot_Operations_Tool as the hardcoded private key used to sign a JWT.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected products

public PoCs found — 2

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References