iFlytek astron-agent vulnerabilities

A vulnerability was identified in iFlytek astron-agent up to 1.1.2 affecting the FileInfoV2Service.listKnowledgeByPage function in FileInfoV2Service.java of the Console Knowledge-List Endpoint component. Manipulation of the space-id argument leads to authorization bypass, and the attack may be launched remotely. The exploit is publicly available, and the vendor did not respond to the disclosure.

A vulnerability was found in iFlytek astron-agent up to 1.1.2 affecting an unknown function in core/memory/database/api/v1/exec_ddl.py within the DDL Whitelist Handler component. The manipulation results in an incomplete blacklist and can be triggered remotely. The exploit has been publicly disclosed and the vendor did not respond.

iFlytek Astron Agent through 1.1.2 contains an insecure direct object reference vulnerability that allows authenticated applications to resume other applications' paused workflows by supplying their event_id to POST /workflow/v1/resume. Attackers can predict Snowflake event IDs to inject resume content into victim workflows and read their continuation output stream, breaking cross-tenant isolation.

SSRF vulnerability in iFlytek astron-agent up to 1.0.6. Affects UrlCheckTool.checkUrl in debugToolV2 API endpoint. Manipulation of endPoint argument allows remote SSRF. Patch available in version reward-1575.

SQL Injection vulnerability in iFlytek astron-agent up to 1.0.7. Affects function in ChatBotMarketMapper.xml in getBotList API endpoint. Manipulation of sortDirection argument allows remote SQL injection. Patch in version reward-1575.

iFlytek astron-agent through version 1.1.1 contains an authorization bypass vulnerability in the copyFlow endpoint that fails to validate workflow ownership. Authenticated attackers can enumerate workflow identifiers and overwrite other tenants' workflows or copy private workflows to read their definitions.