CVE-2026-95930
MediumCVSS 6.3Summary
SSRF vulnerability in iFlytek astron-agent up to 1.0.6. Affects UrlCheckTool.checkUrl in debugToolV2 API endpoint. Manipulation of endPoint argument allows remote SSRF. Patch available in version reward-1575.
Risk Assessment
Attacker can send requests to internal network resources, potentially leading to data disclosure or privilege escalation.
Recommendation
Upgrade the component to version reward-1575 or later, which includes the fix.
Other vulnerabilities in iFlytek astron-agent
See all- CVE-2026-95929Medium
SQL Injection vulnerability in iFlytek astron-agent up to 1.0.7. Affects function in ChatBotMarketMapper.xml in getBotList API endpoint. Manipulation of sortDirection argument allows remote SQL injection. Patch in version reward-1575.
- CVE-2026-82475High
iFlytek astron-agent through version 1.1.1 contains an authorization bypass vulnerability in the copyFlow endpoint that fails to validate workflow ownership. Authenticated attackers can enumerate workflow identifiers and overwrite other tenants' workflows or copy private workflows to read their definitions.
Original NVD description (English source)
A security vulnerability has been detected in iFlytek astron-agent up to 1.0.6. Affected by this vulnerability is the function UrlCheckTool.checkUrl of the component debugToolV2 API endpoint. The manipulation of the argument endPoint leads to server-side request forgery. The attack can be initiated remotely. Upgrading to version reward-1575 addresses this issue. The identifier of the patch is 45ee5fb647e9894e73b0d7720fa94a66e4540bbb. The affected component should be upgraded.