CVE-2026-116339: iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklist
A vulnerability was determined in iFlytek astron-agent up to 1.1.2. This affects an unknown function of the file core/memory/database/api/v1/execddl.py of the component DDL Whitelist Handler. This manipulation causes incomplete blacklist. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Which versions are affected?
The vulnerability affects iFlytek astron-agent up to version 1.1.2. The provided information does not identify a fixed version.
Can this be exploited remotely without authentication?
Yes. The vulnerability is remotely exploitable, and the listed vector indicates no privileges or user interaction are required.
Is exploit code available?
Yes. The exploit has been publicly disclosed and may be used by attackers.
What is known about vendor remediation?
The vendor was contacted early regarding the disclosure but did not respond. No vendor patch or workaround is identified in the provided information.