CVE-2026-82475 in astron-agentinfo

Summary

by MITRE • 08/29/2026

iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow endpoint that fails to validate workflow ownership. Authenticated attackers can enumerate workflow identifiers and overwrite other tenants' workflows or copy private workflows to read their definitions.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsible

VulnCheck

Reservation

08/29/2026

Disclosure

08/29/2026

Moderation

accepted

CPE

ready

EPSS

0.00000

KEV

no

Activities

very low

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-82475
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-82475
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-82475/

◂ PreviousOverviewNext ▸

Do you need the next level of professionalism?

Upgrade your account now!