CVE-2026-108864 | iFlytek Astron Agent up to 1.1.2 Workflow Resume /workflow/v1/resume event_id resource injection

October 11, 2026 Yanac

A vulnerability was found in iFlytek Astron Agent up to 1.1.2. It has been rated as critical. The affected element is an unknown function of the file /workflow/v1/resume of the component Workflow Resume. The manipulation of the argument event_id leads to improper control of resource identifiers.

This vulnerability is referenced as CVE-2026-108864. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More