CVE-2026-108864: iFlytek Astron Agent through 1.1.2 Authorization Bypass via /workflow/v1/resume Endpoint
iFlytek Astron Agent through 1.1.2 contains an insecure direct object reference vulnerability that allows authenticated applications to resume other applications' paused workflows by supplying their eventid to POST /workflow/v1/resume. Attackers can predict Snowflake event IDs to inject resume content into victim workflows and read their continuation output stream, breaking cross-tenant isolation.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs to be authenticated as an application. They must obtain or predict the event_id of another application's paused workflow.
What access does successful exploitation provide?
The attacker can resume a paused workflow belonging to another application, inject resume content into it, and read that workflow's continuation output stream. This breaks cross-tenant isolation and can expose or alter workflow-related data.
Are deployments affected by default?
The provided information identifies the affected endpoint as POST /workflow/v1/resume and does not describe a configuration prerequisite. Any affected deployment where authenticated applications can reach this endpoint and target paused workflows may be exposed.
How can I determine whether my deployment is affected?
Check whether the deployment is iFlytek Astron Agent version 1.1.2 or earlier and exposes POST /workflow/v1/resume. Review whether the endpoint verifies that the authenticated application owns the paused workflow associated with the supplied event_id.