Medium severity · published Oct 11, 2026
CVE-2026-108864
iFlytek Astron Agent through 1.1.2 Authorization Bypass via /workflow/v1/resume Endpoint
4.2
CVSS
0.2%
EPSS
No
On KEV
Description
iFlytek Astron Agent through 1.1.2 contains an insecure direct object reference vulnerability that allows authenticated applications to resume other applications' paused workflows by supplying their event_id to POST /workflow/v1/resume. Attackers can predict Snowflake event IDs to inject resume content into victim workflows and read their continuation output stream, breaking cross-tenant isolation.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Attack vector
Network
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 6% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
astron-agent · iflytek
through 1.1.2 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-108864
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-108864
third-party-advisory
https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/iflytek-astron-agent-cross-app-workflow-resume
technical-description
https://github.com/iflytek/astron-agent/blob/v1.1.2/core/workflow/api/v1/chat/open.py#L106-L183
technical-description
https://github.com/iflytek/astron-agent/blob/v1.1.2/core/workflow/cache/event_registry.py
product
https://github.com/iflytek/astron-agent
third-party-advisory
https://www.vulncheck.com/advisories/iflytek-astron-agent-through-1.1.2-authorization-bypass-via-workflow-v1-resume-endpoint
More from astron-agent
9.9
CVE-2026-108263
Astron Agent: Unsandboxed code-node leads to cross-tenant RCE
8.1
CVE-2026-82475
iFlytek astron-agent through 1.1.1 Workflow Hijacking via Missing Ownership Check
7.3
CVE-2026-116339
iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklist
6.3
CVE-2026-95930
iFlytek astron-agent debugToolV2 API endpoint UrlCheckTool.checkUrl server-side request forgery
6.3
CVE-2026-95929
iFlytek astron-agent getBotList API endpoint ChatBotMarketMapper.xml sql injection