AstrBot

mirror of https://github.com/AstrBotDevs/AstrBot synced 2026-07-16 01:40:15 +08:00

Files

Weilong Liao 8f356b84c7 fix(core): restrict send_message_to_user to current session (security fix #7822 ) (#7824 )

* fix(core): security fix - restrict send_message_to_user to current session only

Closes #7822

SECURITY: Remove the user-controlled 'session' parameter from the
send_message_to_user tool. Previously, a regular user could ask the
LLM to send messages to any arbitrary session (group chat) by
providing a crafted session string, which is a high-risk
vulnerability.

Changes:
- Remove 'session' parameter from tool schema (LLM can no longer
  propose it)
- Always use context.context.event.unified_msg_origin as the target
  session
- Update description to clearly state that messages can only be sent
  to the current user's session

* fix: restore session param but restrict to admin only

- Re-add the  parameter removed in the original PR
- Non-admin users can only send to their own session (current_session)
- Admin users can send to any session via the  param
- Uses  from computer_tools.util (same pattern as fs.py)
- Ref: https://github.com/AstrBotDevs/AstrBot/issues/7822

Co-authored-by: Soulter <soulter@astrbot.app>

* Update message_tools.py

---------

Co-authored-by: AstrBot <bot@astrbot.app>

2026-04-29 00:15:16 +08:00

computer_tools

feat(shell): enhance exec method to support timeout parameter and improve background command handling

2026-04-28 23:55:29 +08:00

cron_tools.py

fix: return an explicit erro from the cron tool when scheduling a task fails instead of processing silently(#7513 )

2026-04-16 20:14:55 +08:00

knowledge_base_tools.py

feat: filesystem grep, read, write, edit file and workspace support (#7402 )

2026-04-11 17:01:54 +08:00

message_tools.py

fix(core): restrict send_message_to_user to current session (security fix #7822 ) (#7824 )