NVD HIGH: CVE-2026-82475 — iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerabilit...

Saturday, August 29, 2026 at 05:18 PM UTC·Source: NIST NVD

Updated: Saturday, August 29, 2026 at 06:00 PM UTC

Executive Summary

iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow endpoint that fails to validate workflow ownership. Authenticated attackers can enumerate workflow identifiers and overwrite other tenants' workflows or copy private workflows to read their definitions.

Analysis

Indicators of Compromise (1)

CVE (1)

CVE-2026-82475

NVD MITRE CVE

Source Attribution

Originally published by NIST NVD on Aug 29, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerability

NVD CRITICAL: CVE-2026-82593 — A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41...

A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /boafrm/formLtefotaUpgradeFibocom of the component LTE Module Firmware Upgrade. This manipulation of the argument fota_url causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used.

CVE-2026-82593

1h agoNIST NVD

MEDIUMVulnerability

South Korea's Shinhan signs for Visa stablecoin platform

South Korean conglomerate Shinhan Financial Group has signed a memorandum of understanding with Visa to use the American firm's new stablecoin platform and explore AI-based payment models.

1h agoFinextra

CRITICALVulnerability

NVD CRITICAL: CVE-2026-82592 — A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function...

A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of the file /boafrm/formDiskFormat of the component Disk Formatting Handler Endpoint. The manipulation of the argument partition results in stack-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be used.

CVE-2026-82592