CVE-2026-95929
Received Received - Intake

SQL Injection in iFlytek astron-agent

Publication date: 2026-09-23

Last updated on: 2026-09-23

Assigner: VulDB

Description
A weakness has been identified in iFlytek astron-agent up to 1.0.7. Affected is an unknown function of the file console/backend/commons/src/main/resources/mapper/ChatBotMarketMapper.xml of the component getBotList API endpoint. Executing a manipulation of the argument sortDirection can lead to sql injection. It is possible to launch the attack remotely. Upgrading to version reward-1575 is able to address this issue. This patch is called 6702be70ae802b1048f5fbec91e690e7b71a4165. You should upgrade the affected component.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-23
Last Modified
2026-09-23
Generated
2026-09-23
AI Q&A
2026-09-23
EPSS Evaluated
N/A
NVD
CVE-2026-95929
EUVD
EUVD-2026-84999

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
iflytek astron-agent to 1.0.7 (exc)
iflytek astron-agent From reward-1575 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-89 The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
CWE-74 The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a SQL injection flaw in the iFlytek astron-agent software up to version 1.0.7. It affects the getBotList API endpoint where the sortDirection parameter is improperly sanitized. Attackers can manipulate this parameter to inject malicious SQL code, potentially accessing or altering database contents. The issue stems from unsafe string interpolation in the MyBatis XML mapper file.

Detection Guidance

To detect this SQL injection vulnerability in iFlytek astron-agent, inspect the getBotList API endpoint for unsafe use of the sortDirection parameter. Check if the parameter is directly concatenated into SQL queries without sanitization. Review logs for unusual sortDirection values like SQL keywords or payloads. Use tools like SQLMap to test for blind SQL injection by sending crafted sortDirection values and monitoring responses for delays or errors.

Impact Analysis

An attacker could exploit this to extract sensitive data like database names, user details, or business information through blind SQL injection. They might also modify or delete database contents if the database permissions allow it. The attack requires only a valid session, making it accessible to unauthorized users with basic access.

Compliance Impact

This vulnerability likely violates compliance requirements for data protection standards like GDPR and HIPAA, which mandate strict controls over data access and integrity. A successful SQL injection could lead to unauthorized data exposure or modification, triggering regulatory penalties and loss of certification.

Mitigation Strategies

Immediately upgrade astron-agent to version reward-1575 or apply the patch commit 6702be70ae802b1048f5fbec91e690e7b71a4165. Ensure the getSafeSortDirection() method is used to sanitize the sortDirection parameter. Validate and restrict sortDirection to only 'ASC' or 'DESC'. Review and update MyBatis XML mappers to use parameterized queries instead of string interpolation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-95929. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart