CVE-2026-108864 Details

A vulnerability allowing insecure direct object reference has been identified in iFlytek Astron Agent versions through 1.1.2. This vulnerability enables authenticated applications to resume paused workflows of other applications by providing the event_id of the interrupted workflow. The issue arises because the resume functionality does not verify the ownership of the event, allowing cross-application interference. Attackers can exploit this by injecting content into the resumed workflow and accessing the output stream, thereby disrupting the intended workflow isolation.

The vulnerability can be fixed by modifying the resume handler to check that the event being resumed belongs to the authenticated application. This can be done by comparing the event's application ID with the ID of the application making the request. Additionally, the event registry should be namespaced by application to prevent cross-application event access.