AstronRPA versions up to and including 1.1.6 contain an insecure direct object reference via the /file/download endpoint, allowing an authenticated user to specify any fileId and retrieve files stored on S3 that belong to other tenants. The vulnerability arises because the FileMapper.getFile method performs no tenant check on the supplied id, enabling attackers to enumerate time‑ordered Snowflake file IDs. Successful exploitation results in the disclosure of potentially sensitive data belonging to other tenants, compromising confidentiality.

Affected products are the Iflytek AstronRPA platform. Specifically, any deployment of iflytek:astron-rpa up to version 1.1.6 is susceptible. Customers running earlier versions that may share the same backend code are likewise vulnerable. No specific sub‑version granular details are listed beyond the ≤1.1.6 boundary.

The CVSS score of 6.0 classifies this as a medium‑severity issue. EPSS is not available, and the vulnerability is not currently listed in the CISA KEV catalog, suggesting limited publicly known exploitation. However, the attack vector is internal, requiring authentication, and the lack of tenant validation means an attacker who can authenticate to any tenant can enumerate and retrieve other tenants’ files. The exploit does not require privileged access beyond a legitimate user session, making it relatively easy for a malicious user already inside the system to leverage this flaw.