CVE-2026-116340
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
A vulnerability was identified in iFlytek astron-agent up to 1.1.2 affecting the FileInfoV2Service.listKnowledgeByPage function in FileInfoV2Service.java of the Console Knowledge-List Endpoint component. Manipulation of the space-id argument leads to authorization bypass, and the attack may be launched remotely. The exploit is publicly available, and the vendor did not respond to the disclosure.
Risk Assessment
Authorization bypass may allow unauthorized access to knowledge data belonging to other spaces. The public availability of the exploit increases the likelihood of exploitation.
Recommendation
Restrict access to the astron-agent console to trusted networks and add additional access control in front of this endpoint. Monitor for a vendor fix, as the vendor has not responded to the disclosure.
Other vulnerabilities in iFlytek astron-agent
See all- CVE-2026-116339High
A vulnerability was found in iFlytek astron-agent up to 1.1.2 affecting an unknown function in core/memory/database/api/v1/exec_ddl.py within the DDL Whitelist Handler component. The manipulation results in an incomplete blacklist and can be triggered remotely. The exploit has been publicly disclosed and the vendor did not respond.
- CVE-2026-108864Medium
iFlytek Astron Agent through 1.1.2 contains an insecure direct object reference vulnerability that allows authenticated applications to resume other applications' paused workflows by supplying their event_id to POST /workflow/v1/resume. Attackers can predict Snowflake event IDs to inject resume content into victim workflows and read their continuation output stream, breaking cross-tenant isolation.
- CVE-2026-95930Medium
SSRF vulnerability in iFlytek astron-agent up to 1.0.6. Affects UrlCheckTool.checkUrl in debugToolV2 API endpoint. Manipulation of endPoint argument allows remote SSRF. Patch available in version reward-1575.
- CVE-2026-95929Medium
SQL Injection vulnerability in iFlytek astron-agent up to 1.0.7. Affects function in ChatBotMarketMapper.xml in getBotList API endpoint. Manipulation of sortDirection argument allows remote SQL injection. Patch in version reward-1575.
- CVE-2026-82475High
iFlytek astron-agent through version 1.1.1 contains an authorization bypass vulnerability in the copyFlow endpoint that fails to validate workflow ownership. Authenticated attackers can enumerate workflow identifiers and overwrite other tenants' workflows or copy private workflows to read their definitions.
Original NVD description (English source)
A vulnerability was identified in iFlytek astron-agent up to 1.1.2. This impacts the function FileInfoV2Service.listKnowledgeByPage of the file FileInfoV2Service.java of the component Console Knowledge-List Endpoint. Such manipulation of the argument space-id leads to authorization bypass. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS