Beveiligingsadvies

CVE-2026-82475

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-29 16:35:34

Laatst bijgewerkt 2026-09-01 02:14:34

Toegewezen door VulnCheck

CVSS-score 8.6

Status PUBLISHED

Beschrijving

iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow endpoint that fails to validate workflow ownership. Authenticated attackers can enumerate workflow identifiers and overwrite other tenants' workflows or copy private workflows to read their definitions.

← Alle CVE's bekijken Bekijk op cve.org ↗