CVE-2026-95929 iFlytek CVE debrief

Who should care

Defenders responsible for iFlytek astron-agent deployments should assess exposure and prioritize upgrading to version reward-1575 or later to address the SQL injection vulnerability.

Why it matters

CVE-2026-95929 is a SQL injection vulnerability in the getBotList API endpoint of iFlytek astron-agent. Defenders should assess exposure, prioritize upgrading to version reward-1575 or later, and implement additional security measures to prevent SQL injection attacks.

• Verify and upgrade affected iFlytek astron-agent deployments to prevent SQL injection attacks
• Monitor API endpoint usage for suspicious activity
• Implement additional security measures to prevent SQL injection attacks

Technical summary

The vulnerability is located in the console/backend/commons/src/main/resources/mapper/ChatBotMarketMapper.xml file of the iFlytek astron-agent component, specifically in the getBotList API endpoint. The sortDirection argument can be manipulated to inject malicious SQL code, allowing for remote attacks. The affected component is iFlytek astron-agent up to version 1.0.7. Upgrading to version reward-1575 is able to address this issue. This patch is called 6702be70ae802b1048f5fbec91e690e7b71a4165. The CVE record and NVD entry provide details about the vulnerability.

Defensive priority

Upgrade to version reward-1575 or later to address the SQL injection vulnerability in the getBotList API endpoint of iFlytek astron-agent.

Recommended defensive actions

• Upgrade to version reward-1575 or later
• Review and monitor API endpoint usage
• Implement additional security measures to prevent SQL injection attacks
• Verify affected iFlytek astron-agent deployments exist
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record and NVD entry provide details about the vulnerability, including its description, affected component, and available patch. The iFlytek astron-agent component is affected up to version 1.0.7. The vulnerability is located in the console/backend/commons/src/main/resources/mapper/ChatBotMarketMapper.xml file. The sortDirection argument can be manipulated to inject malicious SQL code, allowing for remote attacks. There is no indication of publicly available exploits or reports of attacks in the wild. The patch 6702be70ae802b

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.