Iflytek Astron-agent vulnerabilities
- iflytek astron-agent iFlytek astron-agent Console Knowledge-List Endpoint FileInfoV2Service.java FileInfoV2Service.listKnowledgeByPage authorization 5.3 Medium
- iflytek astron-agent iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklist 6.9 Medium
- iflytek astron-agent iFlytek Astron Agent through 1.1.2 Authorization Bypass via /workflow/v1/resume Endpoint 2.3 Low
- iflytek astron-agent Astron Agent: Unsandboxed code-node leads to cross-tenant RCE 9.9 Critical
- iflytek astron-agent iFlytek astron-agent debugToolV2 API endpoint UrlCheckTool.checkUrl server-side request forgery 5.3 Medium
- iflytek astron-agent iFlytek astron-agent getBotList API endpoint ChatBotMarketMapper.xml sql injection 5.3 Medium
- iflytek astron-agent iFlytek astron-agent through 1.1.1 Workflow Hijacking via Missing Ownership Check 8.6 High