Vulnerability · Published Oct 11, 2026 · Assigned by VulnCheck

CVE-2026-108864iFlytek Astron Agent through 1.1.2 Authorization Bypass via /workflow/v1/resume Endpoint

Medium 4.2

In plain English

A medium-severity authorization bypass via user-controlled key in astron-agent from iflytek. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities).

Severity (CVSS 3.1)4.2Medium

Exploit odds (30 days)0.2%top 93.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

iFlytek Astron Agent through 1.1.2 contains an insecure direct object reference vulnerability that allows authenticated applications to resume other applications' paused workflows by supplying their event_id to POST /workflow/v1/resume. Attackers can predict Snowflake event IDs to inject resume content into victim workflows and read their continuation output stream, breaking cross-tenant isolation.

Affected products (as reported)

Vendor	Product	Versions
iflytek	astron-agent	0 – through 1.1.2

Weakness: CWE-639 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

References

https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/iflytek-astron-agent-cross-app-workflow-resume third-party-advisory
https://github.com/iflytek/astron-agent/blob/v1.1.2/core/workflow/api/v1/chat/open.py#L106-L183 technical-description
https://github.com/iflytek/astron-agent/blob/v1.1.2/core/workflow/cache/event_registry.py technical-description
https://github.com/iflytek/astron-agent product
VulnCheck Advisory: iFlytek Astron Agent through 1.1.2 Authorization Bypass via /workflow/v1/resume Endpoint third-party-advisory