iflytek astron-agent vulnerabilities

Newest CVEs

• CVE-2026-116340

  iFlytek astron-agent Console Knowledge-List Endpoint FileInfoV2Service.java FileInfoV2Service.listKnowledgeByPage authorization

  iFlytek · astron-agent

  Medium5.3
• CVE-2026-116339

  iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklist

  iFlytek · astron-agent

  Medium6.9
• CVE-2026-108864

  iFlytek Astron Agent through 1.1.2 Authorization Bypass via /workflow/v1/resume Endpoint

  iflytek · astron-agent

  Low2.3
• CVE-2026-108263

  Astron Agent: Unsandboxed code-node leads to cross-tenant RCE

  iflytek · astron-agent

  Critical9.9
• CVE-2026-95930

  iFlytek astron-agent debugToolV2 API endpoint UrlCheckTool.checkUrl server-side request forgery

  iFlytek · astron-agent

  Medium5.3
• CVE-2026-95929

  iFlytek astron-agent getBotList API endpoint ChatBotMarketMapper.xml sql injection

  iFlytek · astron-agent

  Medium5.3
• CVE-2026-82475

  iFlytek astron-agent through 1.1.1 Workflow Hijacking via Missing Ownership Check

  iflytek · astron-agent

  High8.6