Astron Agent
Monthly
Authorization bypass in iFlytek astron-agent through 1.1.1 enables authenticated low-privilege users to enumerate workflow identifiers and access workflows owned by other tenants via the copyFlow endpoint, which performs no ownership validation. Attackers can both exfiltrate private workflow definitions - exposing proprietary AI automation logic - and overwrite other tenants' production workflows, achieving high confidentiality and integrity impact across tenant boundaries. No active exploitation is confirmed by CISA KEV and no EPSS data was available, but the vulnerability is publicly disclosed via a GitHub issue and a VulnCheck advisory, making the technical details openly accessible to potential attackers.
Authorization bypass in iFlytek astron-agent through 1.1.1 enables authenticated low-privilege users to enumerate workflow identifiers and access workflows owned by other tenants via the copyFlow endpoint, which performs no ownership validation. Attackers can both exfiltrate private workflow definitions - exposing proprietary AI automation logic - and overwrite other tenants' production workflows, achieving high confidentiality and integrity impact across tenant boundaries. No active exploitation is confirmed by CISA KEV and no EPSS data was available, but the vulnerability is publicly disclosed via a GitHub issue and a VulnCheck advisory, making the technical details openly accessible to potential attackers.