A security vulnerability has been detected in AstrBotDevs AstrBot up to version 4.16.0. The issue affects the authentication processing in the file astrbot/dashboard/routes/auth.py of the Dashboard component. The vulnerability involves hard-coded credentials that can be exploited remotely. The exploit has been publicly disclosed and is available for use. The vendor was contacted about this disclosure but did not respond. This represents a significant security risk as hard-coded credentials provide unauthorized access to the system.