Authorization Bypass in iFlytek astron-agent

iFlytek astron-agent versions through 1.1.1 are susceptible to an authorization bypass vulnerability located within the copyFlow endpoint. The vulnerability stems from a failure to perform adequate ownership validation when processing requests to copy or manipulate workflow data. Because the application does not verify if the authenticated user has appropriate permissions for the requested workflow identifier, an attacker can enumerate valid workflow IDs and perform unauthorized actions. This flaw impacts multi-tenant environments by permitting attackers to overwrite the workflows of other tenants or exfiltrate private workflow definitions. Defenders should prioritize patching, as this vulnerability allows for data exfiltration and integrity compromise within the agent platform.

Impact

The vulnerability poses a significant risk to the confidentiality and integrity of automated workflows managed within astron-agent. If exploited, an attacker can read sensitive workflow logic and configuration (exfiltration) or modify existing processes (integrity compromise), potentially leading to further unauthorized operations within the affected tenant environment. The scope of targeting includes any multi-tenant deployment where tenant isolation is expected but not enforced at the application layer.

Recommendation

1. Patch all deployments of astron-agent to a version later than 1.1.1 immediately, as remediation for CVE-2026-82475 is required to enforce proper ownership checks.
2. Implement strict input validation and authorization logging at the API gateway layer to detect excessive attempts to access the /copyFlow endpoint from non-authorized user contexts.
3. Review access logs for the copyFlow endpoint to identify potential workflow enumeration activity, characterized by high-frequency requests targeting different workflow identifiers from a single user session.