High severity · published Aug 29, 2026
CVE-2026-82475
iFlytek astron-agent through 1.1.1 Workflow Hijacking via Missing Ownership Check
8.1
CVSS
0.4%
EPSS
No
On KEV
Description
iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow endpoint that fails to validate workflow ownership. Authenticated attackers can enumerate workflow identifiers and overwrite other tenants' workflows or copy private workflows to read their definitions.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 39% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
astron-agent · iflytek
through 1.1.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-82475
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-82475
github.com
https://github.com/iflytek/astron-agent
github.com
https://github.com/iflytek/astron-agent/blob/v1.1.1/console/backend/toolkit/src/main/java/com/iflytek/astron/console/toolkit/service/workflow/WorkflowService.java
github.com
https://github.com/iflytek/astron-agent/issues/1590
www.vulncheck.com
https://www.vulncheck.com/advisories/iflytek-astron-agent-through-1.1.1-workflow-hijacking-via-missing-ownership-check
More from astron-agent
9.9
CVE-2026-108263
Astron Agent: Unsandboxed code-node leads to cross-tenant RCE
7.3
CVE-2026-116339
iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklist
6.3
CVE-2026-95930
iFlytek astron-agent debugToolV2 API endpoint UrlCheckTool.checkUrl server-side request forgery
6.3
CVE-2026-95929
iFlytek astron-agent getBotList API endpoint ChatBotMarketMapper.xml sql injection
4.3
CVE-2026-116340
iFlytek astron-agent Console Knowledge-List Endpoint FileInfoV2Service.java FileInfoV2Service.listKnowledgeByPage authorization