Skip to content
circuitobserver
Vulnerabilities

Astron Agent CVE-2026-108263 Lets Tenants Run Root Code

A critical flaw in Astron Agent versions prior to 1.1.2 allows authenticated users to execute code as root and bypass tenant isolation controls.

Illustration: A sleek black server chassis sits on a clean white desk with its side panel removed to reveal a complex internal circuit board.
AI-generated illustration: Circuit Observer

Key points

  • The vulnerability carries a CVSS score of 9.9 and is rated critical by the National Vulnerability Database.
  • Affected versions include all releases of Astron Agent prior to version 1.1.2.
  • Attackers can use shared credentials to access data belonging to other tenants on the platform.

The National Vulnerability Database published a critical record on CVE-2026-108263, assigning it a maximum CVSS score of 9.9. This vulnerability affects the Astron Agent agentic workflow platform, specifically versions released before 1.1.2. The flaw allows authenticated users with low privileges to execute arbitrary code with root permissions within the core-workflow container.

How it unfolded

  • The issue originates in the default workflow code-node path through specific API endpoints.
  • The system selects LocalExecutor when the CODE_EXEC_TYPE configuration is not explicitly changed by an administrator.
  • LocalExecutor provides complete Python builtins for dynamic code execution without the documented sandbox restrictions.

Who is affected

Organizations running Astron Agent versions older than 1.1.2 are vulnerable to this exploit. The flaw impacts any deployment where the default configuration remains unchanged, allowing the LocalExecutor to run with elevated privileges. According to the NVD record, the weaknesses associated with this flaw include CWE-95, CWE-306, CWE-653, CWE-863, and CWE-1392.

What happens next

The vendor has released version 1.1.2, which fixes this security issue. System administrators should verify their current installation version immediately. If the platform is running an older build, upgrading to 1.1.2 is required to mitigate the risk of privilege escalation and data leakage.

What to do and how to stay safe: Astron Agent

  • Check the current version of Astron Agent installed on all production and development servers.
  • Upgrade to version 1.1.2 or later to apply the vendor-provided fix for the code execution flaw.
  • Review API endpoint access logs for unusual activity on /console-api/workflow/code/run and /workflow/v1/run.
  • Audit tenant isolation configurations to ensure no shared service credentials are exposed to low-privilege users.

General security guidance from the Circuit Observer newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

What is the CVSS score for CVE-2026-108263?

The National Vulnerability Database rates CVE-2026-108263 as critical with a CVSS score of 9.9.

Which versions of Astron Agent are affected by this vulnerability?

All versions of Astron Agent prior to version 1.1.2 are affected by this security flaw.

Is there a fix available for this vulnerability?

Yes, the issue is fixed in version 1.1.2 of the Astron Agent platform.

Sources

  1. CVE Program
Astron AgentCVE-2026-108263iflytekCVSS 9.9privilege escalation

Related stories

Detect Authorization Bypass Vulnerabilities in Logs and Code

Authorization bypasses often hide in successful responses rather than failed attempts, requiring analysts to verify permission checks match the actual user context.