What’s Vulnerable › Products

iflytek astron-agent vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your iflytek astron-agent version is affected

Latest iflytek astron-agent vulnerabilities

• CVE-2026-116339 — iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklist (CVSS 7.3)
• CVE-2026-116340 — iFlytek astron-agent Console Knowledge-List Endpoint FileInfoV2Service.java FileInfoV2Service.listKnowledgeByPage authorization (CVSS 4.3)
• CVE-2026-108864 — iFlytek Astron Agent through 1.1.2 Authorization Bypass via /workflow/v1/resume Endpoint (CVSS 4.2)
• CVE-2026-108263 — Astron Agent: Unsandboxed code-node leads to cross-tenant RCE (CVSS 9.9)
• CVE-2026-95930 — iFlytek astron-agent debugToolV2 API endpoint UrlCheckTool.checkUrl server-side request forgery (CVSS 6.3)
• CVE-2026-95929 — iFlytek astron-agent getBotList API endpoint ChatBotMarketMapper.xml sql injection (CVSS 6.3)
• CVE-2026-82475 — iFlytek astron-agent through 1.1.1 Workflow Hijacking via Missing Ownership Check (CVSS 8.1)