{"id":"CVE-2025-47948","aliases":["GHSA-mj2c-8hxf-ffvq"],"url":"https://o3.security/vulnerability/CVE-2025-47948","summary":"Cocotais Bot has builtin .echo command injection","details":"### Summary\n\nA command echoing feature in the framework allows users to indirectly trigger privileged behavior by injecting special platform tags. Specifically, an unauthorized user can use the `/echo <qqbot-at-everyone />` command to cause the bot to send a message that mentions all members in the chat, bypassing any permission controls. This can lead to spam, disruption, or abuse of notification systems.\n\n### Details\n\nThe framework provides a command `/echo` that causes the bot to repeat any user-provided message verbatim in the group chat. However, the bot fails to sanitize or filter platform-specific control elements such as `<qqbot-at-everyone />`, which, when included in a message, mentions everyone (i.e., @全体成员). While normal users are forbidden from using this tag in normal chats, the bot, which has higher privileges, is allowed to do so.\n\nSince the `/echo` command blindly echoes any content, a user can exploit this by sending:\n\n```\n/echo <qqbot-at-everyone />\n```\n\nThe bot will then send a message containing `<qqbot-at-everyone />`, causing the platform to interpret it as an @全体成员 command, effectively allowing an unauthorized user to @everyone via the bot.\n\n### PoC\n\n1. Set up a chatbot using the affected framework.\n2. Join the chat that includes the bot as a regular user with **no permission to use @全体成员**.\n3. Send the following message in the chat:\n\n```\n/echo <qqbot-at-everyone />\n```\n4. The bot will respond by repeating the message, and the platform will interpret `<qqbot-at-everyone />` as an @全体成员 mention.\n5. All the chat members receive a notification, despite the user lacking that permission.\n\n","published":"2025-05-17T18:42:24.382Z","modified":"2026-08-12T03:51:09.961464842Z","cvss":{"score":7.2,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L"},"epss":{"score":0.00394,"percentile":0.32251,"asOf":"2026-08-24"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"npm","name":"cocotais-bot","fixedVersion":"1.6.2"}],"fix":{"url":"https://github.com/cocotais/cocotais-bot/commit/d1cf01a9a41b3131241d1833444b890c8d6e70b8","label":"cocotais/cocotais-bot@d1cf01a"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/47xxx/CVE-2025-47948.json"},{"type":"ADVISORY","url":"https://github.com/cocotais/cocotais-bot/security/advisories/GHSA-mj2c-8hxf-ffvq"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47948"},{"type":"FIX","url":"https://github.com/cocotais/cocotais-bot/commit/d1cf01a9a41b3131241d1833444b890c8d6e70b8"},{"type":"PACKAGE","url":"https://github.com/cocotais/cocotais-bot"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-12T03:51:09.961464842Z"}}