CVE-2026-95929: iFlytek astron-agent getBotList API endpoint ChatBotMarketMapper.xml sql injection
A weakness has been identified in iFlytek astron-agent up to 1.0.7. Affected is an unknown function of the file console/backend/commons/src/main/resources/mapper/ChatBotMarketMapper.xml of the component getBotList API endpoint. Executing a manipulation of the argument sortDirection can lead to sql injection. It is possible to launch the attack remotely. Upgrading to version reward-1575 is able to address this issue. This patch is called 6702be70ae802b1048f5fbec91e690e7b71a4165. You should upgrade the affected component.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
iFlytek astron-agentto a version that resolves this vulnerability.Fixed in reward-1575Patch 6702be70ae802b1048f5fbec91e690e7b71a4165
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attack can be launched remotely, but the listed vector requires low privileges. An attacker must be able to invoke the getBotList API endpoint and control its sortDirection argument.
Which deployments are affected?
iFlytek astron-agent versions up to 1.0.7 are affected. The issue is in the getBotList API endpoint's handling of sortDirection through ChatBotMarketMapper.xml.
What remediation is available?
Upgrade the affected component to version reward-1575. The available fix is identified by patch commit 6702be70ae802b1048f5fbec91e690e7b71a4165.