---
id: CVE-2026-116339
title: iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklist
summary: >-
  A vulnerability was determined in iFlytek astron-agent up to 1.1.2. This
  affects an unknown function of the file
  core/memory/database/api/v1/exec_ddl.py of the component DDL Whitelist
  Handler. This manipulation causes incomplete blacklis…
severity: high
cvss: 7.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C'
cvssSource: cna
cwe:
  - CWE-184
  - CWE-183
vendor: iFlytek
product: astron-agent
affected:
  - astron-agent 1.1.0
  - astron-agent 1.1.1
  - astron-agent 1.1.2
ssvc:
  exploitation: poc
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-10-26T16:08:00.637625Z'
exploitAvailable: true
published: '2026-10-26'
updated: '2026-10-26'
sourceUpdated: '2026-10-26T16:15:37.067Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-116339'
references:
  - url: 'https://vuldb.com/vuln/426314'
    label: >-
      VDB-426314 | iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete
      blacklist
  - url: 'https://vuldb.com/vuln/426314/cti'
    label: 'VDB-426314 | CTI Indicators (IOB, IOC, TTP, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2026-116339'
    label: CVE-2026-116339 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/1011581'
    label: >-
      Submit #1011581 | iFlytek astron-agent v1.1.2, main
      b4f8ed57460cbfb32016a4afd3fd7212987d33c3 Incomplete List of Disallowed
      Inputs
  - url: 'https://github.com/Rinne666/poc/tree/main/astron-agent-poc'
  - url: >-
      https://github.com/Rinne666/poc/blob/main/astron-agent-poc/poc/v1_ddl_whitelist_comment_smuggling.py
tags:
  - cve.org
  - exploit-available
ingestedAt: '2026-10-26T15:29:30.522Z'
---

## Overview

A vulnerability was determined in iFlytek astron-agent up to 1.1.2. This affects an unknown function of the file core/memory/database/api/v1/exec_ddl.py of the component DDL Whitelist Handler. This manipulation causes incomplete blacklist. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

## Affected

- `astron-agent 1.1.0`
- `astron-agent 1.1.1`
- `astron-agent 1.1.2`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.