CVE-2026-110764 is an authorization bypass vulnerability in iflytek astron-rpa versions up to 1.1.6. It affects the /file/download endpoint of the resource-service, allowing authenticated users to download files belonging to other tenants by supplying their fileId. The vulnerability arises because the FileMapper.getFile function does not verify file ownership or tenant association, and file IDs are predictable due to their time-ordered Snowflake format. This enables attackers to enumerate and access S3-stored files of other tenants without proper authorization.
iFlytek SkillHub versions up to 0.2.22 contain a missing authorization vulnerability that allows any authenticated user to delete other users' skills permanently. The vulnerability exists in the DELETE /api/cli/v1/skills/{namespace}/{slug} endpoint, which lacks ownership checks. Attackers can find targets using an anonymous search endpoint and delete all associated data including versions, files, reviews, ratings, and metadata.
CVE-2026-108864 is an authorization bypass vulnerability in iFlytek Astron Agent versions up to 1.1.2. It allows authenticated applications to resume other applications' paused workflows by supplying their event_id to the POST /workflow/v1/resume endpoint. Attackers can predict Snowflake event IDs to inject resume content into victim workflows and read their continuation output stream, breaking cross-tenant isolation. The vulnerability has a low severity score and affects cloud-hosted services.
SkillHub versions before 0.2.22 have an incorrect authorization vulnerability in the AccountMergeService and AccountMergeController. Authenticated attackers can abuse the merge flow to take over other user accounts by initiating a merge with a target username or OAuth identity, obtaining the verification token directly, and confirming the merge. This allows attackers to inherit the victim's API tokens, roles, and namespace ownership.
AstronRPA versions up to 1.1.6 have an authentication bypass vulnerability in the OpenResty gateway's auth_handler.lua component. This flaw allows unauthenticated attackers to send arbitrary Bearer tokens without validation to specific API routes, enabling them to spoof user identity headers and act as any user. The vulnerability has a medium severity rating with a CVSS score of 6.9.
CVE-2026-108547 is a high-severity vulnerability in iflytek AstronRPA versions up to 1.1.6. It involves a missing tenant authorization check in the robot-service component, allowing authenticated users to access shared variables belonging to other tenants via the get-batch-shared-var endpoint. Attackers can enumerate shared variable IDs and decrypt variables re-encrypted with their own tenant key, exposing other tenants' credentials in plaintext.
CVE-2026-108263 is a critical vulnerability in iflytek's astron-agent prior to version 1.1.2. It involves improper neutralization of directives in dynamically evaluated code, allowing an authenticated low-privilege tenant to execute arbitrary code as root within the core-workflow container. This can lead to unauthorized access to shared service and database credentials, bypassing tenant isolation, and enabling data compromise or service disruption. The issue is fixed in version 1.1.2.
AstronRPA versions up to 1.1.6 have a vulnerability where the desktop client downloads code updates without verifying their integrity. This allows a network attacker positioned between the client and update server to deliver malicious update manifests and installers, which are installed without signature checks, leading to code execution with the desktop user's privileges.
AstronRPA versions up to 1.1.6 contain a cross-site scripting (XSS) vulnerability in the desktop client's smart-component chat. This flaw allows remote attackers to execute operating system commands by injecting malicious content into the LLM output, which is rendered unsanitized via v-html. The vulnerability arises from improper neutralization of input during web page generation, enabling attackers to embed HTML event handlers that invoke an unrestricted IPC handler with shell metacharacters. This results in command execution with the privileges of the desktop user.
A security vulnerability has been detected in iFlytek astron-agent up to 1.0.6. Affected by this vulnerability is the function UrlCheckTool.checkUrl of the component debugToolV2 API endpoint. The manipulation of the argument endPoint leads to server-side request forgery. The attack can be initiated remotely. Upgrading to version reward-1575 addresses this issue. The identifier of the patch is 45ee5fb647e9894e73b0d7720fa94a66e4540bbb. The affected component should be upgraded.
A weakness has been identified in iFlytek astron-agent up to 1.0.7. Affected is an unknown function of the file console/backend/commons/src/main/resources/mapper/ChatBotMarketMapper.xml of the component getBotList API endpoint. Executing a manipulation of the argument sortDirection can lead to sql injection. It is possible to launch the attack remotely. Upgrading to version reward-1575 is able to address this issue. This patch is called 6702be70ae802b1048f5fbec91e690e7b71a4165. You should upgrade the affected component.
iFlytek astron-agent versions through 1.1.1 have an authorization bypass vulnerability in the copyFlow endpoint. This flaw allows authenticated users to enumerate workflow IDs and overwrite or copy workflows belonging to other tenants without proper ownership validation. The vulnerability has a high severity rating with a CVSS score of 8.6.