CVE-2026-108864— iFlytek Astron Agent through 1.1.2 Authorization Bypass via /workflow/v1/resume Endpoint
Quick assessment
Affected
iflytek astron-agent
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
讯飞星汉 Agent（iFlytek Astron Agent）版本 1.1.2 存在不安全的直接对象引用（IDOR）漏洞。该漏洞允许已认证的的应用程序通过向 接口发起 POST 请求，并提供其他应用程序的 ，从而恢复其他应用程序暂停的工作流。攻击者可预测 Snowflake 事件 ID，将恢复内容注入受害者工作流，并读取其后续输出流，从而破坏多租户间的隔离性。
Affected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| iflytek | astron-agent | ≤ 1.1.2 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-108864
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
iFlytek Astron Agent through 1.1.2 Authorization Bypass via /workflow/v1/resume Endpoint
Source: CVE Program / CVE List V5
Vulnerability Description
iFlytek Astron Agent through 1.1.2 contains an insecure direct object reference vulnerability that allows authenticated applications to resume other applications' paused workflows by supplying their event_id to POST /workflow/v1/resume. Attackers can predict Snowflake event IDs to inject resume content into victim workflows and read their continuation output stream, breaking cross-tenant isolation.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过用户控制密钥绕过授权机制
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| iflytek | astron-agent | 0 ~ 1.1.2 | - |
|
II. Public POCs for CVE-2026-108864
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-108864
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-108864 (1)
Security Blog Posts for CVE-2026-108864 (1)
Other References for CVE-2026-108864 (1)
IV. Related Vulnerabilities
Same product: astron-agent
-
CVE-2026-108263
Astron Agent: Unsandboxed code-node leads to cross-tenant RC -
CVE-2026-95930
iFlytek astron-agent debugToolV2 API endpoint UrlCheckTool.c -
CVE-2026-95929
iFlytek astron-agent getBotList API endpoint ChatBotMarketMa -
CVE-2026-82475
iFlytek astron-agent through 1.1.1 Workflow Hijacking via Mi
Same vendor: iflytek
-
CVE-2026-108550
SkillHub before 0.2.22 Account Takeover via Account Merge Fl -
CVE-2026-108548
AstronRPA through 1.1.6 Authentication Bypass via Arbitrary -
CVE-2026-108547
AstronRPA through 1.1.6 Cross-Tenant Shared Variable Disclos -
CVE-2026-108263
Astron Agent: Unsandboxed code-node leads to cross-tenant RC -
CVE-2026-108160
AstronRPA through 1.1.6 Unsigned Update Installation via Pla
Same weakness: CWE-639
-
CVE-2026-109116
AdithyaYelloju Restaurant-Management-System Order Management -
CVE-2026-109675
Frappe Suite before commit 2697564 Broken Access Control in -
CVE-2026-109568
Shaark 1.2.13 through 1.2.44 Missing Authorization via API U -
CVE-2026-109427
Telegram-Stremio 5.1.0 Broken Object Authorization via Strea -
CVE-2026-108924
getkirby Kirby Dynamic Option Generation OptionsQuery.php re
V. Comments for CVE-2026-108864
No comments yet