---
id: "CVE-2026-116340"
kind: "vulnerability"
aliases: ["CVE-2026-116340"]
title: "iFlytek astron-agent: knowledge list endpoint lets callers bypass authorization"
severity: "medium"
cvss: 4.3
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["ai-agents", "ai-tooling", "astron-agent", "self-hosted"]
not_affected_if: ["version-above-1.1.2"]
published_at: "2026-10-26T15:16:40+00:00"
first_seen_at: "2026-10-26T16:02:25+00:00"
updated_at: "2026-10-26T16:03:58+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-116340", "first_seen_at": "2026-10-26T16:02:25+00:00"}]
---

# iFlytek astron-agent: knowledge list endpoint lets callers bypass authorization

The Console Knowledge-List endpoint in iFlytek astron-agent up to 1.1.2 does not properly check authorization when the space-id argument is manipulated. A remote attacker can list knowledge bases in spaces they should not be able to see.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed astron-agent version; unknown whether the sources list an exact fixed release
- Review whether the Console knowledge-list endpoint (FileInfoV2Service.listKnowledgeByPage) is reachable from the internet

## Fix

- Upgrade astron-agent beyond `1.1.2`; unknown whether a fixed version has been released
- Restrict access to the Console until a fix is available; unknown whether the vendor has published a patch

## Timeline

- 2026-10-26T16:02:25+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-116340

## From the sources

A vulnerability was identified in iFlytek astron-agent up to 1.1.2. This impacts the function FileInfoV2Service.listKnowledgeByPage of the file FileInfoV2Service.java of the component Console Knowledge-List Endpoint. Such manipulation of the argument space-id leads to authorization bypass. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_