An insecure direct object reference (CWE‑639) exists in iFlytek Astron Agent up to version 1.1.2 that allows authenticated applications to resume paused workflows of other applications by supplying a valid event_id to the POST /workflow/v1/resume endpoint. By predicting Snowflake event IDs, an attacker can inject resume content into a victim workflow and read the continuation output stream, thereby breaking cross‑tenant isolation and revealing data that should remain private.

iFlytek Astron Agent versions 1.1.2 and earlier are affected. Any deployment that uses the iflytek:astron-agent product without applying the latest patch is vulnerable.

The CVSS score of 2.3 indicates low impact for unauthorized users, but the inability to enforce authorization across tenants can be abused by an authenticated application or user. The EPSS score is not available, and the vulnerability is not listed in CISA KEV. The likely attack requires reaching the /workflow/v1/resume API with valid credentials; from there the attacker can predict event IDs and read cross‑tenant data. Although low severity, the violation of tenant isolation justifies prompt remediation.