THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-82475 (HIGH 8.1) — iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow endpoint that fails to validate workflow ownership. Authenticated attackers can enumerate workflow identifiers and overwrite other tenants' workflows or copy private workflows to rea

[NVD] CVE-2026-82475 (HIGH 8.1) — iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow endpoint that fails to validate workflow ownership. Authenticated attackers can enumerate workflow identifiers and overwrite other tenants' workflows or copy private workflows to rea

mednvdPublished 2026-08-29

CVE-2026-82475 CVSS: 8.1 HIGH Published: 2026-08-29T17:18:00.057

iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow endpoint that fails to validate workflow ownership. Authenticated attackers can enumerate workflow identifiers and overwrite other tenants' workflows or copy private workflows to read their definitions.

Indicators of compromise

CVE-2026-82475cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-82475