Technical impact
The vulnerability resides in the exec_ddl.py file of the DDL Whitelist Handler in iFlytek’s astron‑agent. The flaw results in an incomplete blacklist, allowing attackers to craft specialized commands that bypass security checks. Successful exploitation could enable the execution of arbitrary DDL instructions, potentially modifying, deleting, or exposing data. This attack poses a threat to both data confidentiality and integrity and may lead to a full compromise of the database engine used by the application.
Affected Systems
iFlytek Astron‑Agent versions up to and including 1.1.2 are affected. The vulnerability targets the exec_ddl.py component within the core/memory/database/api/v1 path. No other versions or components were specifically mentioned as affected in the available data.
Risk and Exploitability
The CVSS score of 6.9 indicates a moderate risk. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting no widespread, confirmed exploitation in the public domain. The attack can be initiated remotely, as stated, and the public disclosure indicates that an exploit script exists. Because the flaw stems from an incomplete blacklist (CWE‑183 and CWE‑184), an attacker only needs to craft a valid DDL request that is routed to the agent; no advanced privileges are required beyond network access to the service. Overall, the risk is considered moderate but actionable given the potential impact on data and the ease of remote execution.
