Manipulation of the space-id argument in the FileInfoV2Service.listKnowledgeByPage function of iFlytek's astron-agent allows an attacker to bypass normal authorization checks. The vulnerability is an authorization bypass that permits unauthorized users to query the console's Knowledge-List endpoint and retrieve sensitive information. Because the affected component processes the space-id without proper access control, an attacker can gain read access to data that should be protected.

Affected product is iFlytek's astron-agent, version 1.1.2 and earlier. The issue resides specifically in the Console Knowledge-List Endpoint's FileInfoV2Service.java implementation. Any deployment of astron-agent up to 1.1.2 exposes this flaw.

The CVSS base score of 5.3 classifies the flaw as moderate, indicating that the impact is moderate but the exploitation would still allow significant misuse. The EPSS score is not available, and the vulnerability is not listed in CISA's KEV, suggesting no confirmed large‑scale exploitation yet. Nonetheless, the public proof‑of‑concept code demonstrates that the attack can be launched remotely without initial authentication, so the risk remains noteworthy for systems that expose the console endpoint to the internet or an untrusted network.