Skip to content
OpenAdvisories

Product · iflytek

astron-agent

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.3
    CVE-2026-116339

    iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklist

    A vulnerability was determined in iFlytek astron-agent up to 1.1.2. This affects an unknown function of the file core/memory/database/api/v1/exec_ddl.py of the component DDL Whitelist Handler. This manipulation causes incomplete blacklist. The attack may be i…

    iflytek astron-agent
  • High 8.1
    CVE-2026-82475

    iFlytek astron-agent through 1.1.1 Workflow Hijacking via Missing Ownership Check

    iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow endpoint that fails to validate workflow ownership. Authenticated attackers can enumerate workflow identifiers and overwrite other tenants' workflows or copy pri…

    iflytek astron-agent