CVEvulnerability

CVE-2026-108263

9.9 CRITICAL Published 2026-10-09 Modified 2026-10-16 Official page ↗
Status
Deferred
Published
2026-10-09
Last modified
2026-10-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.9 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-1392, CWE-306, CWE-653, CWE-863, CWE-95

Description

Astron Agent is an agentic workflow platform for building and running AI agents. Prior to 1.1.2, the default workflow code-node path through /console-api/workflow/code/run and /workflow/v1/run selects LocalExecutor in core/workflow/engine/nodes/code/code_node.py when CODE_EXEC_TYPE is not explicitly changed. LocalExecutor supplies complete Python builtins to dynamic code execution without the documented sandbox restrictions. An authenticated low-privilege tenant can execute code as root in the core-workflow container and use shared service and database credentials to bypass application-level tenant checks, read or modify other tenants' data, and disrupt shared services. This issue is fixed in version 1.1.2.

Related

Weakness · CWE (5)

  • CWE-1392 Use of Default Credentials weakness
  • CWE-306 Missing Authentication for Critical Functionality weakness
  • CWE-653 Improper Isolation or Compartmentalization weakness
  • CWE-863 Incorrect Authorization weakness
  • CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code weakness

References