Skip to content
Iflytek vulnerabilities
Newest
-
iflytek astron-agent
iFlytek astron-agent Console Knowledge-List Endpoint FileInfoV2Service.java FileInfoV2Service.listKnowledgeByPage authorization
CVE-2026-116340
5.3 Medium
-
iflytek astron-agent
iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklist
CVE-2026-116339
6.9 Medium
-
iflytek astron-rpa
AstronRPA through 1.1.6 Cross-Tenant File Disclosure via /file/download
CVE-2026-110764
6.0 Medium
-
iflytek skillhub
SkillHub through 0.2.22 Missing Authorization in CLI Skill Delete Endpoint
CVE-2026-110211
7.2 High
-
iflytek astron-agent
iFlytek Astron Agent through 1.1.2 Authorization Bypass via /workflow/v1/resume Endpoint
CVE-2026-108864
2.3 Low
-
iflytek skillhub
SkillHub before 0.2.22 Account Takeover via Account Merge Flow
CVE-2026-108550
8.7 High
-
iflytek astron-rpa
AstronRPA through 1.1.6 Authentication Bypass via Arbitrary Bearer Token
CVE-2026-108548
6.9 Medium
-
iflytek astron-rpa
AstronRPA through 1.1.6 Cross-Tenant Shared Variable Disclosure via get-batch-shared-var
CVE-2026-108547
7.1 High
-
iflytek astron-agent
Astron Agent: Unsandboxed code-node leads to cross-tenant RCE
CVE-2026-108263
9.9 Critical
-
iflytek astron-rpa
AstronRPA through 1.1.6 Unsigned Update Installation via Plain-HTTP Feed
CVE-2026-108160
7.7 High
-
iflytek astron-rpa
AstronRPA through 1.1.6 RCE via Smart-Component Chat XSS and IPC Bridge
CVE-2026-108159
7.7 High
-
iflytek astron-agent
iFlytek astron-agent debugToolV2 API endpoint UrlCheckTool.checkUrl server-side request forgery
CVE-2026-95930
5.3 Medium
-
iflytek astron-agent
iFlytek astron-agent getBotList API endpoint ChatBotMarketMapper.xml sql injection
CVE-2026-95929
5.3 Medium
-
iflytek astron-agent
iFlytek astron-agent through 1.1.1 Workflow Hijacking via Missing Ownership Check
CVE-2026-82475
8.6 High