Iflytek Astron-Agent
5 CVEs affecting Iflytek Astron-Agent. Latest disclosed: 2026-10-11. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-108263 | Critical | 9.9 | 2026-10-09 | Astron Agent is an agentic workflow platform for building and running AI agents. Prior to 1.1.2, the default workflow code-node path through /console-api/workf… |
CVE-2026-82475 | High | 8.1 | 2026-08-29 | iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow endpoint that fails to validate workflow ownership. Authentic… |
CVE-2026-95930 | Medium | 6.3 | 2026-09-23 | A security vulnerability has been detected in iFlytek astron-agent up to 1.0.6. Affected by this vulnerability is the function UrlCheckTool.checkUrl of the com… |
CVE-2026-95929 | Medium | 6.3 | 2026-09-23 | A weakness has been identified in iFlytek astron-agent up to 1.0.7. Affected is an unknown function of the file console/backend/commons/src/main/resources/mapp… |
CVE-2026-108864 | Medium | 4.2 | 2026-10-11 | iFlytek Astron Agent through 1.1.2 contains an insecure direct object reference vulnerability that allows authenticated applications to resume other applicatio… |