CVE-2026-108263
criticalAstron Agent is an agentic workflow platform for building and running AI agents.
Astron Agent is an agentic workflow platform for building and running AI agents. Prior to 1.1.2, the default workflow code-node path through /console-api/workflow/code/run and /workflow/v1/run selects LocalExecutor in core/workflow/engine/nodes/code/code_node.py when CODE_EXEC_TYPE is not explicitly changed. LocalExecutor supplies complete Python builtins to dynamic code execution without the documented sandbox restrictions. An authenticated low-privilege tenant can execute code as root in the core-workflow container and use shared service and database credentials to bypass application-level tenant checks, read or modify other tenants' data, and disrupt shared services. This issue is fixed in version 1.1.2.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affected products
Not reported by the source (unknown — not "none").
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
No vendor advisory or patch reference tagged by NVD. Check the references below.
References
- https://github.com/iflytek/astron-agent/commit/848daba03e5e045435863815be7ab6dfbcefc18f security-advisories@github.com
- https://github.com/iflytek/astron-agent/commit/ebf074a431e96da0ad9e0a56409d3d2da15eae36 security-advisories@github.com
- https://github.com/iflytek/astron-agent/pull/1650 security-advisories@github.com
- https://github.com/iflytek/astron-agent/pull/1651 security-advisories@github.com
- https://github.com/iflytek/astron-agent/releases/tag/v1.1.2 security-advisories@github.com
- https://github.com/iflytek/astron-agent/security/advisories/GHSA-mh3w-4q3f-2fg5 security-advisories@github.com