{"id":"CVE-2026-116340","kind":"vulnerability","aliases":["CVE-2026-116340"],"related":[],"title":"iFlytek astron-agent: knowledge list endpoint lets callers bypass authorization","description":"A vulnerability was identified in iFlytek astron-agent up to 1.1.2. This impacts the function FileInfoV2Service.listKnowledgeByPage of the file FileInfoV2Service.java of the component Console Knowledge-List Endpoint. Such manipulation of the argument space-id leads to authorization bypass. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.","summary":"The Console Knowledge-List endpoint in iFlytek astron-agent up to 1.1.2 does not properly check authorization when the space-id argument is manipulated. A remote attacker can list knowledge bases in spaces they should not be able to see.","severity":"medium","cvss":4.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-agents","ai-tooling","astron-agent","self-hosted"],"not_affected_if":["version-above-1.1.2"],"how_to_check":"- Check the installed astron-agent version; unknown whether the sources list an exact fixed release\n- Review whether the Console knowledge-list endpoint (FileInfoV2Service.listKnowledgeByPage) is reachable from the internet","fix":"- Upgrade astron-agent beyond `1.1.2`; unknown whether a fixed version has been released\n- Restrict access to the Console until a fix is available; unknown whether the vendor has published a patch","status":"open","published_at":"2026-10-26T15:16:40+00:00","first_seen_at":"2026-10-26T16:02:25+00:00","triaged_at":"2026-10-26T16:03:58+00:00","updated_at":"2026-10-26T16:03:58+00:00","category":"ai-tooling","confidence":0.5,"triage":{"at":"2026-10-26T16:03:58Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade astron-agent beyond `1.1.2`; unknown whether a fixed version has been released\n- Restrict access to the Console until a fix is available; unknown whether the vendor has published a patch","reach":"internet","title":"iFlytek astron-agent: knowledge list endpoint lets callers bypass authorization","impact":"low","summary":"The Console Knowledge-List endpoint in iFlytek astron-agent up to 1.1.2 does not properly check authorization when the space-id argument is manipulated. A remote attacker can list knowledge bases in spaces they should not be able to see.","category":"ai-tooling","nicknames":[],"who_cares":["astron-agent","ai-agents","self-hosted"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Remote callers read knowledge base listings from other spaces","analyst_note":"Confirm the fixed version and whether the endpoint requires any login; the vendor did not respond, so check the NVD and GitHub pages for a patch.","how_to_check":"- Check the installed astron-agent version; unknown whether the sources list an exact fixed release\n- Review whether the Console knowledge-list endpoint (FileInfoV2Service.listKnowledgeByPage) is reachable from the internet","needs_analyst":true,"not_affected_if":["version-above-1.1.2"],"who_is_affected":"Teams running iFlytek astron-agent up to version 1.1.2 with the Console knowledge-list feature reachable over the network. The sources do not describe other configurations; unknown whether deployments behind a login proxy are protected.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000632,"input_tokens":3367,"output_tokens":591,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-116340':14A,17A '-2026':13A,16A '1.1.2':43B,84C 'abl':70B 'agent':4A,20B,26B,40B,81C 'ai':19B,22B 'ai-ag':18B 'ai-tool':21B 'argument':54B,106C 'astron':3A,25B,39B,80C 'astron-ag':2A,24B,38B,79C 'attack':59B,115C 'author':11A,48B,112C 'avail':124C 'base':63B 'bypass':10A,113C 'caller':9A 'check':47B 'compon':96C 'consol':31B,97C 'contact':132C 'cve':12A,15A 'disclosur':136C 'earli':133C 'endpoint':7A,35B,101C 'exploit':121C 'file':92C 'fileinfov2service.java':93C 'fileinfov2service.listknowledgebypage':89C 'function':88C 'host':29B 'id':53B,109C 'identifi':76C 'iflytek':1A,37B,78C 'impact':86C 'knowledg':5A,33B,62B,99C 'knowledge-list':32B,98C 'launch':118C 'lead':110C 'let':8A 'list':6A,34B,61B,100C 'manipul':56B,103C 'may':116C 'might':126C 'proper':46B 'public':123C 'remot':58B,119C 'respond':140C 'see':72B 'self':28B 'self-host':27B 'space':52B,65B,108C 'space-id':51B,107C 'tool':23B 'use':128C 'vendor':130C 'vulner':74C 'way':143C","nicknames":[],"mitigations":[],"who_affected":"Teams running iFlytek astron-agent up to version 1.1.2 with the Console knowledge-list feature reachable over the network. The sources do not describe other configurations; unknown whether deployments behind a login proxy are protected.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T15:16:40+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116340","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116340","severity":null,"published_at":"2026-10-26T15:16:40+00:00","modified_at":"2026-10-26T15:16:40+00:00","first_seen_at":"2026-10-26T16:02:25+00:00","fetched_at":"2026-10-26T16:02:25+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}