A critical authorization bypass in iFlytek astron-agent allows authenticated users to hijack or expose sensitive workflow data across tenant boundaries.

The vulnerability exists in the copyFlow endpoint, which fails to perform proper ownership validation of workflow resources. This allows any authenticated user to interact with workflows belonging to other tenants by manipulating workflow identifiers.

Successful exploitation of this vulnerability leads to a total compromise of workflow confidentiality and integrity. An attacker can read private workflow definitions containing sensitive logic or overwrite them, potentially leading to unauthorized data processing or service disruption. Given the CVSS score of 8.1, this represents a high-severity risk to organizational data sovereignty and business process continuity.

Immediate Action: Currently, there is no vendor-supplied patch available for this vulnerability; administrators should restrict access to the astron-agent instance to trusted users only and monitor for suspicious workflow enumeration patterns.

Proactive Monitoring: Security teams should monitor application logs for unusual spikes in workflow access requests or unauthorized attempts to modify workflows associated with different tenant IDs.

Compensating Controls: Implement Web Application Firewall (WAF) rules to inspect traffic directed at the copyFlow endpoint, blocking requests that attempt to access identifiers outside of the authenticated user's assigned scope.

Public Exploit Available: Unknown

This vulnerability presents a significant risk to multi-tenant environments by breaking logical tenant isolation. Organizations using iFlytek astron-agent should prioritize limiting user permissions and implementing strict network-level access controls until the vendor releases a security update that enforces mandatory ownership checks at the code level.