CVE-2026-110764 | iflytek AstronRPA up to 1.1.6 Resource Service /file/download FileMapper.getFile fileId resource injection

October 14, 2026 Yanac

A vulnerability classified as problematic was found in iflytek AstronRPA up to 1.1.6. Affected by this issue is the function FileMapper.getFile of the file /file/download of the component Resource Service. Executing a manipulation of the argument fileId can lead to improper control of resource identifiers.

This vulnerability is tracked as CVE-2026-110764. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More