CVE-2026-82475: iFlytek astron-agent through 1.1.1 Workflow Hijacking via Missing Ownership Check
iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow endpoint that fails to validate workflow ownership. Authenticated attackers can enumerate workflow identifiers and overwrite other tenants' workflows or copy private workflows to read their definitions.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker must be authenticated and have low-level privileges. Because the affected endpoint does not validate workflow ownership, a user in one tenant may target workflows belonging to other tenants.
What does an attacker need to do to exploit it?
The attacker needs to enumerate workflow identifiers and submit requests to the copyFlow endpoint. No user interaction is required, and the attack can be performed over the network.
What is the potential impact on another tenant's workflows?
An attacker can overwrite another tenant's workflow or copy a private workflow and read its definition. This can compromise confidentiality and integrity of workflow content.