Auth bypass in Iflytek Astron-Agent
CVE-2026-82475
iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow endpoint that fails to validate workflow ownership. Authenticated attackers can enumerate workflow identifiers and overwrite other tenants' workflows or copy private workflows to read their definitions.
Vulnerability class: Broken Access Control
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N.
EPSS exploit prediction
EPSS: 0.004 (37.2th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 37th percentile — 37.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.004 · change: +0.002
Affected products
Weakness classification (CWE)
References
- github.com/iflytek/astron-agent/issues/1590 (issue-tracking)
- github.com/iflytek/astron-agent/blob/v1.1.1/console/backend/toolkit/src/main/ja… (technical-description)
- github.com/iflytek/astron-agent (product)
- www.vulncheck.com/advisories/iflytek-astron-agent-through-1.1.1-workflow-hijack… (third-party-advisory)
Frequently asked questions
- What is CVE-2026-82475?
- CVE-2026-82475 is a high-severity vulnerability in Iflytek Astron-Agent, classified under Missing Authorization. CVSS score: 8.1/10. Published 2026-08-29.
- How severe is CVE-2026-82475?
- High severity. CVSS v3 base score is 8.1 out of 10.