Product by Iflytek

    Astron-agent

    7 known vulnerabilities in Astron-agent (Iflytek), 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Astron-agent (Iflytek)
    CriticalCVE-2026-108263

    Astron Agent: Unsandboxed code-node leads to cross-tenant RCE

    		9.9
    HighCVE-2026-116339

    iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklist

    		7.3
    HighCVE-2026-82475

    iFlytek astron-agent through 1.1.1 Workflow Hijacking via Missing Ownership Check

    		8.1
    MediumCVE-2026-95930

    iFlytek astron-agent debugToolV2 API endpoint UrlCheckTool.checkUrl server-side request forgery

    		6.3
    MediumCVE-2026-95929

    iFlytek astron-agent getBotList API endpoint ChatBotMarketMapper.xml sql injection

    		6.3
    MediumCVE-2026-116340

    iFlytek Astron-agent: Authorization Bypass Through User-Controlled Key

    		4.3
    MediumCVE-2026-108864

    iFlytek Astron Agent through 1.1.2 Authorization Bypass via /workflow/v1/resume Endpoint

    		4.2

    All products by Iflytek