Tools AI Risk Radar ai-incident-0187
Incident record
Astron Agent fixes root code execution through workflow nodes
- Severity
- Critical
- Status
- Patched
- Type
- Infra Vuln
- Target
- Astron Agent through 1.1.1
- Actor
- researcher
- CVE
- CVE-2026-108263
What happened
An authenticated user with low privileges could use a legacy local workflow node to run code as root and access shared credentials or other tenants’ data.
The original maintainer advisory was published on 7 September and updated alongside the CVE on 9 October. Version 1.1.2 fixes the flaw. The maintainer rates it Critical, with CVSS 3.1 score 9.9.
Sources
- Primary disclosuregithub.com/iflytek/astron-agent/security/advisories/GHSA-mh3…
- Supporting primary sourcecveawg.mitre.org/api/cve/CVE-2026-108263
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 October 2026