CVE-2026-82475

CVE-2026-82475 is a missing-authorization flaw (CWE-862) in iFlytek astron-agent through version 1.1.1: the copyFlow endpoint processes workflow copy and overwrite requests without verifying that the requesting user owns the target workflow. An authenticated attacker sends copyFlow requests using workflow identifiers belonging to another tenant, and the endpoint accepts them because ownership is never validated. This lets the attacker overwrite workflows belonging to other tenants (integrity impact) and copy private workflows into their own space to read their definitions, potentially exposing proprietary prompts, logic, and business data (high confidentiality impact per the CVSS vector). Any astron-agent deployment at version 1.1.1 or earlier is affected, with multi-tenant or multi-user self-hosted instances facing the greatest risk. There is currently no public proof of concept, the flaw is not in CISA's KEV catalog, and EPSS assigns it a low 0.3% probability of exploitation in the next 30 days.

What to do: Upgrade astron-agent to a release newer than 1.1.1 as soon as the vendor publishes a fix, and in the meantime restrict access to the copyFlow endpoint to trusted authenticated users where possible. Administrators should audit workflow identifiers for unauthorized overwrites or copies, since private workflow definitions may already have been read by other tenants.