iflytek vulnerabilities

Newest CVEs

• CVE-2026-116340

  iFlytek astron-agent Console Knowledge-List Endpoint FileInfoV2Service.java FileInfoV2Service.listKnowledgeByPage authorization

  iFlytek · astron-agent

  Medium5.3
• CVE-2026-116339

  iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklist

  iFlytek · astron-agent

  Medium6.9
• CVE-2026-110764

  AstronRPA through 1.1.6 Cross-Tenant File Disclosure via /file/download

  iflytek · astron-rpa

  Medium6.0
• CVE-2026-110211

  SkillHub through 0.2.22 Missing Authorization in CLI Skill Delete Endpoint

  iflytek · skillhub

  High7.2
• CVE-2026-108864

  iFlytek Astron Agent through 1.1.2 Authorization Bypass via /workflow/v1/resume Endpoint

  iflytek · astron-agent

  Low2.3
• CVE-2026-108550

  SkillHub before 0.2.22 Account Takeover via Account Merge Flow

  iflytek · skillhub

  High8.7
• CVE-2026-108548

  AstronRPA through 1.1.6 Authentication Bypass via Arbitrary Bearer Token

  iflytek · astron-rpa

  Medium6.9
• CVE-2026-108547

  AstronRPA through 1.1.6 Cross-Tenant Shared Variable Disclosure via get-batch-shared-var

  iflytek · astron-rpa

  High7.1
• CVE-2026-108263

  Astron Agent: Unsandboxed code-node leads to cross-tenant RCE

  iflytek · astron-agent

  Critical9.9
• CVE-2026-108160

  AstronRPA through 1.1.6 Unsigned Update Installation via Plain-HTTP Feed

  iflytek · astron-rpa

  High7.7