Vendor

    Iflytek

    14 known vulnerabilities in products by Iflytek, 0 of them actively exploited (CISA KEV).

    Key figures

    14

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Iflytek
    CriticalCVE-2026-108263

    Astron Agent: Unsandboxed code-node leads to cross-tenant RCE

    		9.9
    HighCVE-2026-110211

    SkillHub through 0.2.22 Missing Authorization in CLI Skill Delete Endpoint

    		8.1
    HighCVE-2026-116339

    iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklist

    		7.3
    HighCVE-2026-82475

    iFlytek astron-agent through 1.1.1 Workflow Hijacking via Missing Ownership Check

    		8.1
    HighCVE-2026-108550

    SkillHub before 0.2.22 Account Takeover via Account Merge Flow

    		8.8
    HighCVE-2026-108159

    AstronRPA through 1.1.6 RCE via Smart-Component Chat XSS and IPC Bridge

    		7.5
    HighCVE-2026-108548

    AstronRPA through 1.1.6 Authentication Bypass via Arbitrary Bearer Token

    		7.3
    MediumCVE-2026-95930

    iFlytek astron-agent debugToolV2 API endpoint UrlCheckTool.checkUrl server-side request forgery

    		6.3
    HighCVE-2026-108160

    AstronRPA through 1.1.6 Unsigned Update Installation via Plain-HTTP Feed

    		7.5
    MediumCVE-2026-95929

    iFlytek astron-agent getBotList API endpoint ChatBotMarketMapper.xml sql injection

    		6.3
    HighCVE-2026-108547

    AstronRPA through 1.1.6 Cross-Tenant Shared Variable Disclosure via get-batch-shared-var

    		6.5
    MediumCVE-2026-110764

    AstronRPA through 1.1.6 Cross-Tenant File Disclosure via /file/download

    		5.3
    MediumCVE-2026-116340

    iFlytek Astron-agent: Authorization Bypass Through User-Controlled Key

    		4.3
    MediumCVE-2026-108864

    iFlytek Astron Agent through 1.1.2 Authorization Bypass via /workflow/v1/resume Endpoint

    		4.2

    Products

    Products by Iflytek
    Astron-agent70
    Astron-rpa50