CVE-2026-108548 | Iflytek AstronRPA up to 1.1.6 Auth auth_handler.lua X-User-Id/user_id improper authentication

October 10, 2026 Yanac

A vulnerability categorized as critical has been discovered in Iflytek AstronRPA up to 1.1.6. The impacted element is an unknown function of the file auth_handler.lua of the component Auth Handler. The manipulation of the argument X-User-Id/user_id results in improper authentication.

This vulnerability is cataloged as CVE-2026-108548. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More