agentprime: iflytek-astron-agentEvery new CVE for iflytek-astron-agent.https://agentprime.io/CVE-2026-116340: iFlytek astron-agent Console Knowledge-List Endpoint FileInfoV2Service.java FileInfoV2Service.listKnowledgeByPage authorizationhttps://agentprime.io/advisories/CVE-2026-116340/https://agentprime.io/advisories/CVE-2026-116340/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 14:45:22 GMTCVECVE-2026-116339: iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklisthttps://agentprime.io/advisories/CVE-2026-116339/https://agentprime.io/advisories/CVE-2026-116339/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 14:30:18 GMTCVECVE-2026-108864: iFlytek Astron Agent through 1.1.2 Authorization Bypass via /workflow/v1/resume Endpointhttps://agentprime.io/advisories/CVE-2026-108864/https://agentprime.io/advisories/CVE-2026-108864/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sun, 11 Oct 2026 13:26:10 GMTCVECVE-2026-108263: Astron Agent: Unsandboxed code-node leads to cross-tenant RCEhttps://agentprime.io/advisories/CVE-2026-108263/https://agentprime.io/advisories/CVE-2026-108263/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 20:47:38 GMTCVEcriticalCVE-2026-95930: iFlytek astron-agent debugToolV2 API endpoint UrlCheckTool.checkUrl server-side request forgeryhttps://agentprime.io/advisories/CVE-2026-95930/https://agentprime.io/advisories/CVE-2026-95930/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 02:15:20 GMTCVECVE-2026-95929: iFlytek astron-agent getBotList API endpoint ChatBotMarketMapper.xml sql injectionhttps://agentprime.io/advisories/CVE-2026-95929/https://agentprime.io/advisories/CVE-2026-95929/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 02:00:12 GMTCVECVE-2026-82475: iFlytek astron-agent through 1.1.1 Workflow Hijacking via Missing Ownership Checkhttps://agentprime.io/advisories/CVE-2026-82475/https://agentprime.io/advisories/CVE-2026-82475/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 29 Aug 2026 16:35:34 GMTCVE