iFlytek astron-rpa

• CVE-2026-110764 Medium 5.3 AstronRPA through 1.1.6 Cross-Tenant File Disclosure via /file/download 0.2%
• CVE-2026-108548 High 7.3 AstronRPA through 1.1.6 Authentication Bypass via Arbitrary Bearer Token 0.3%
• CVE-2026-108547 Medium 6.5 AstronRPA through 1.1.6 Cross-Tenant Shared Variable Disclosure via get-batch-shared-var 0.2%
• CVE-2026-108160 High 7.5 AstronRPA through 1.1.6 Unsigned Update Installation via Plain-HTTP Feed 0.1%
• CVE-2026-108159 High 7.5 AstronRPA through 1.1.6 RCE via Smart-Component Chat XSS and IPC Bridge 0.3%