Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

iflytek — Vulnerabilities & Security Advisories 12

Browse all 12 CVE security advisories affecting iflytek. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This is a vulnerability aggregation page for the vendor iflytek, focusing on cybersecurity weaknesses and software flaws. The page collects records of discovered security issues, ranging from critical remote code execution risks to less severe information disclosure vulnerabilities, covering data from recent years to provide a comprehensive historical view of the vendor's security posture. Here, users can track iflytek’s official advisories to stay informed about patched flaws, understand the nature and impact of specific weakness classes affecting their products, and look up a particular product’s vulnerability history to assess long-term risk profiles. By aggregating these data points, the page serves as a central reference for security researchers, IT administrators, and procurement teams who need to evaluate the reliability of iflytek’s solutions. The information is organized to help stakeholders identify trends, such as recurring issues in specific product lines or common attack vectors exploited in the past. This structured approach allows for better threat modeling and informed decision-making regarding software procurement and deployment. The content is strictly informational and aims to support transparent security practices within the enterprise and government sectors that often rely on iflytek’s voice recognition and AI technologies. Users are encouraged to cross-reference this data with official vendor channels for the most current patching status and mitigation advice.

CVE ID Title CVSS Severity Published
CVE-2026-110764 AstronRPA through 1.1.6 Cross-Tenant File Disclosure via /file/download — astron-rpa CWE-639 5.3 Medium 2026-10-14
CVE-2026-110211 SkillHub through 0.2.22 Missing Authorization in CLI Skill Delete Endpoint — skillhub CWE-862 8.1 High 2026-10-13
CVE-2026-108864 iFlytek Astron Agent through 1.1.2 Authorization Bypass via /workflow/v1/resume Endpoint — astron-agent CWE-639 4.2 Medium 2026-10-11
CVE-2026-108550 SkillHub before 0.2.22 Account Takeover via Account Merge Flow — skillhub CWE-863 8.8 High 2026-10-10
CVE-2026-108548 AstronRPA through 1.1.6 Authentication Bypass via Arbitrary Bearer Token — astron-rpa CWE-287 7.3 High 2026-10-10
CVE-2026-108547 AstronRPA through 1.1.6 Cross-Tenant Shared Variable Disclosure via get-batch-shared-var — astron-rpa CWE-639 6.5 Medium 2026-10-10
CVE-2026-108263 Astron Agent: Unsandboxed code-node leads to cross-tenant RCE — astron-agent CWE-95 9.9 Critical 2026-10-09
CVE-2026-108160 AstronRPA through 1.1.6 Unsigned Update Installation via Plain-HTTP Feed — astron-rpa CWE-494 7.5 High 2026-10-09
CVE-2026-108159 AstronRPA through 1.1.6 RCE via Smart-Component Chat XSS and IPC Bridge — astron-rpa CWE-79 7.5 High 2026-10-09
CVE-2026-95930 iFlytek astron-agent debugToolV2 API endpoint UrlCheckTool.checkUrl server-side request forgery — astron-agent CWE-918 6.3 Medium 2026-09-23
CVE-2026-95929 iFlytek astron-agent getBotList API endpoint ChatBotMarketMapper.xml sql injection — astron-agent CWE-89 6.3 Medium 2026-09-23
CVE-2026-82475 iFlytek astron-agent through 1.1.1 Workflow Hijacking via Missing Ownership Check — astron-agent CWE-862 8.1 High 2026-08-29

This page lists every published CVE security advisory associated with iflytek. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.