Astron Agent v1.1.2 security release

Evidence record

Vendor describes unsafe legacy workflow execution, cross-tenant data access risk and v1.1.2 isolation, auth and migration changes; published September 7.

Read the original source ↗

Claim-level citations (3)

• supportsAstron Agent legacy workflow executor could cross tenant boundaries: The release describes versions through v1.1.1 using local execution as affected and notes that single-tenant installations retain a code-execution risk.

  Affected versions and patched version bullets

• supportsAstron Agent legacy workflow executor could cross tenant boundaries: iFlytek lists v1.1.2 as the security release, with an isolated executor by default, internal service hardening and upgrade guidance covering both service images and configuration.

  Workflow code execution and tenant isolation; Upgrade Notes

• supportsAstron Agent legacy workflow executor could cross tenant boundaries: iFlytek says the legacy unsandboxed local workflow executor could let authenticated workflow creators execute code in its workflow container and access or modify other tenants’ data in affected deployments.

  Security Release, Workflow code execution and tenant isolation