iFlytek astron-agent allows an attacker to inject arbitrary SQL through the getBotList API endpoint when the sortDirection argument is manipulated. The injection occurs by unsanitized input being incorporated into SQL statements within ChatBotMarketMapper.xml, enabling the execution of attacker‑supplied commands and the potential exfiltration or modification of data stored in the database. The vulnerability is confirmed in versions up to 1.0.7 and can be exploited remotely. Based on the CVSS score of 5.3, the impact is moderate, allowing attackers to gain access to sensitive data or influence the application’s data integrity without needing local access.

The affected software is iFlytek astron-agent, specifically the backend module that processes the getBotList API call defined in ChatBotMarketMapper.xml. All releases up to and including 1.0.7 are vulnerable. The vendor released a patch in the reward‑1575 release (commit 6702be70ae802b1048f5fbec91e690e7b71a4165) that fixes the SQL injection flaw.

The CVSS base score of 5.3 places this vulnerability in the moderate severity range. The EPSS score is not available, so the current probability of exploitation is unknown. The vulnerability is not listed in the CISA KEV catalog. Attackers can trigger the flaw by sending a crafted request to the getBotList endpoint over the network, making it a remote exploitation vector. Although the potential damage is moderate, the ease of exploitation warrants timely remediation.