iflytek astron-agent vulnerabilities
7 published CVEs name iflytek astron-agent among the affected products.
- 7Published CVEs7 of them scored
- 7Last 12 monthspublished in the last year
- 1Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-116340
iFlytek astron-agent Console Knowledge-List Endpoint FileInfoV2Service.java FileInfoV2Service.listKnowledgeByPage authorization
iFlytek · astron-agent
Medium5.3 - CVE-2026-116339
iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklist
iFlytek · astron-agent
Medium6.9 - CVE-2026-108864
iFlytek Astron Agent through 1.1.2 Authorization Bypass via /workflow/v1/resume Endpoint
iflytek · astron-agent
Low2.3 - CVE-2026-108263
Astron Agent: Unsandboxed code-node leads to cross-tenant RCE
iflytek · astron-agent
Critical9.9 - CVE-2026-95930
iFlytek astron-agent debugToolV2 API endpoint UrlCheckTool.checkUrl server-side request forgery
iFlytek · astron-agent
Medium5.3 - CVE-2026-95929
iFlytek astron-agent getBotList API endpoint ChatBotMarketMapper.xml sql injection
iFlytek · astron-agent
Medium5.3 - CVE-2026-82475
iFlytek astron-agent through 1.1.1 Workflow Hijacking via Missing Ownership Check
iflytek · astron-agent
High8.6