CVE-2026-108864
MediumCVSS 4.2Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
iFlytek Astron Agent through 1.1.2 contains an insecure direct object reference vulnerability that allows authenticated applications to resume other applications' paused workflows by supplying their event_id to POST /workflow/v1/resume. Attackers can predict Snowflake event IDs to inject resume content into victim workflows and read their continuation output stream, breaking cross-tenant isolation.
Risk Assessment
Breaking cross-tenant isolation allows injecting data into other applications' workflows and reading their outputs, potentially leading to data leakage and unauthorized actions.
Recommendation
Upgrade iFlytek Astron Agent to a patched version or enforce resource ownership checks in the /workflow/v1/resume endpoint to prevent resuming workflows belonging to other applications.
Other vulnerabilities in iFlytek Astron Agent
See all- CVE-2026-116340Medium
A vulnerability was identified in iFlytek astron-agent up to 1.1.2 affecting the FileInfoV2Service.listKnowledgeByPage function in FileInfoV2Service.java of the Console Knowledge-List Endpoint component. Manipulation of the space-id argument leads to authorization bypass, and the attack may be launched remotely. The exploit is publicly available, and the vendor did not respond to the disclosure.
- CVE-2026-116339High
A vulnerability was found in iFlytek astron-agent up to 1.1.2 affecting an unknown function in core/memory/database/api/v1/exec_ddl.py within the DDL Whitelist Handler component. The manipulation results in an incomplete blacklist and can be triggered remotely. The exploit has been publicly disclosed and the vendor did not respond.
- CVE-2026-95930Medium
SSRF vulnerability in iFlytek astron-agent up to 1.0.6. Affects UrlCheckTool.checkUrl in debugToolV2 API endpoint. Manipulation of endPoint argument allows remote SSRF. Patch available in version reward-1575.
- CVE-2026-95929Medium
SQL Injection vulnerability in iFlytek astron-agent up to 1.0.7. Affects function in ChatBotMarketMapper.xml in getBotList API endpoint. Manipulation of sortDirection argument allows remote SQL injection. Patch in version reward-1575.
- CVE-2026-82475High
iFlytek astron-agent through version 1.1.1 contains an authorization bypass vulnerability in the copyFlow endpoint that fails to validate workflow ownership. Authenticated attackers can enumerate workflow identifiers and overwrite other tenants' workflows or copy private workflows to read their definitions.
Original NVD description (English source)
iFlytek Astron Agent through 1.1.2 contains an insecure direct object reference vulnerability that allows authenticated applications to resume other applications' paused workflows by supplying their event_id to POST /workflow/v1/resume. Attackers can predict Snowflake event IDs to inject resume content into victim workflows and read their continuation output stream, breaking cross-tenant isolation.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS