CVE-2026-95930
Received Received - Intake

Server-Side Request Forgery in iFlytek astron-agent

Publication date: 2026-09-23

Last updated on: 2026-09-23

Assigner: VulDB

Description
A security vulnerability has been detected in iFlytek astron-agent up to 1.0.6. Affected by this vulnerability is the function UrlCheckTool.checkUrl of the component debugToolV2 API endpoint. The manipulation of the argument endPoint leads to server-side request forgery. The attack can be initiated remotely. Upgrading to version reward-1575 addresses this issue. The identifier of the patch is 45ee5fb647e9894e73b0d7720fa94a66e4540bbb. The affected component should be upgraded.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-23
Last Modified
2026-09-23
Generated
2026-09-23
AI Q&A
2026-09-23
EPSS Evaluated
N/A
NVD
CVE-2026-95930
EUVD
EUVD-2026-85001

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
iflytek astron-agent to 1.0.6 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Server-Side Request Forgery (SSRF) flaw in the iFlytek astron-agent up to version 1.0.6. It affects the UrlCheckTool.checkUrl function in the debugToolV2 API endpoint. The issue allows authenticated users to send custom HTTP requests to arbitrary endpoints, including internal systems, by manipulating the endPoint argument. The Python layer automatically follows redirects, enabling full SSRF exploitation.

Detection Guidance

To detect this SSRF vulnerability in iFlytek astron-agent, monitor network traffic for unusual outbound requests from the debugToolV2 API endpoint. Check for excessive redirects or requests to internal IP ranges or cloud metadata endpoints. Use tools like tcpdump or Wireshark to capture traffic from the astron-agent process. Inspect logs for repeated failed URL checks or unexpected HTTP responses from the debugToolV2 interface.

Impact Analysis

An attacker could exploit this to probe internal networks, access cloud metadata, or interact with internal services. They might bypass security controls to access sensitive data or systems. The vulnerability allows full response echoing, which could lead to information leakage. Upgrading to version reward-1575 or applying the patch 45ee5fb647e9894e73b0d7720fa94a66e4540bbb is recommended.

Compliance Impact

This SSRF vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection principles and HIPAA's security requirements. It may cause data breaches, unauthorized disclosure of personal or health information, and non-compliance with access control and integrity safeguards.

Mitigation Strategies

Immediately upgrade iFlytek astron-agent to version reward-1575 or apply the patch with identifier 45ee5fb647e9894e73b0d7720fa94a66e4540bbb. Disable or restrict access to the debugToolV2 API endpoint if not required. Implement network-level controls to block outbound requests to internal or sensitive IP ranges. Monitor for any ongoing exploitation attempts in system logs.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-95930. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart