Astron Agent workflow local executor cross-tenant code execution advisory

Evidence record

Researcher and maintainer account of unsandboxed workflow execution, cross-tenant data access, and v1.1.2 deployment migration.

Read the original source ↗

Claim-level citations (3)

• supportsAstron Agent local workflow executor ran unsandboxed code with cross-tenant database reach: Researchers showed Astron Agent local workflow execution used full Python builtins and could run under a root container with database credentials.

  Original vulnerability report; Details 1-3 and reproduction runs

• supportsAstron Agent local workflow executor ran unsandboxed code with cross-tenant database reach: Astron Agent 1.1.2 disables the unsafe local executor, changes isolation defaults and requires coherent image and Compose updates.

  Resolution and affected versions; Patches; Upgrade guidance

• supportsAstron Agent local workflow executor ran unsandboxed code with cross-tenant database reach: The Astron advisory reports that authenticated workflow creators could execute code as root in core-workflow, and separately identifies an unauthenticated invocation path for peers already on astron-agent-network.

  Impact: Who can exploit it; core-workflow:7880 internal route; direct database superuser access