Advisories · Technology
iFlytek astron-agent.
Every CVE that names iFlytek astron-agent among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
iFlytek astron-agent Console Knowledge-List Endpoint FileInfoV2Service.java FileInfoV2Service.listKnowledgeByPage authorization
- iFlytek astron-agent
- Broken access control
- CVSS 6.9 Medium
iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklist
- iFlytek astron-agent
- CWE-183
- CWE-184
- CVSS 2.3 Low
iFlytek Astron Agent through 1.1.2 Authorization Bypass via /workflow/v1/resume Endpoint
- iflytek astron-agent
- Broken access control
- CVSS 9.9 CriticalCritical · CVSS 9+
Astron Agent: Unsandboxed code-node leads to cross-tenant RCE
- iflytek astron-agent
- Code injection
- Authentication bypass
- CVSS 5.3 Medium
iFlytek astron-agent debugToolV2 API endpoint UrlCheckTool.checkUrl server-side request forgery
- iFlytek astron-agent
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
iFlytek astron-agent getBotList API endpoint ChatBotMarketMapper.xml sql injection
- iFlytek astron-agent
- Other injection
- SQL injection
- CVSS 8.6 High
iFlytek astron-agent through 1.1.1 Workflow Hijacking via Missing Ownership Check
- iflytek astron-agent
- Broken access control