Skip to content
OpenAdvisories

Vendor

iflytek

14 known vulnerabilities.

Products

astron-agent 7 astron-rpa 5 skillhub 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.9
    CVE-2026-108263

    Astron Agent: Unsandboxed code-node leads to cross-tenant RCE

    Astron Agent is an agentic workflow platform for building and running AI agents. Prior to 1.1.2, the default workflow code-node path through /console-api/workflow/code/run and /workflow/v1/run selects LocalExecutor in core/workflow/engine/nodes/code/code_node…

    iflytek astron-agent