Secuno
ENNL
Book demo

CVE-2026-108263

Astron Agent code injection

9.9 CRITICALEPSS 0.43%
  1. Published9 Oct 2026

Description

Astron Agent is an agentic workflow platform for building and running AI agents. Prior to 1.1.2, the default workflow code-node path through /console-api/workflow/code/run and /workflow/v1/run selects LocalExecutor in core/workflow/engine/nodes/code/code_node.py when CODE_EXEC_TYPE is not explicitly changed. LocalExecutor supplies complete Python builtins to dynamic code execution without the documented sandbox restrictions. An authenticated low-privilege tenant can execute code as root in the core-workflow container and use shared service and database credentials to bypass application-level tenant checks, read or modify other tenants' data, and disrupt shared services. This issue is fixed in version 1.1.2.

CVSS 3.1 breakdown

Attack vectorNetwork
Attack complexityLow
Privileges requiredLow
User interactionNone
ScopeChanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Remediation

No fixed version is recorded in the NVD data. Check the vendor advisory for the latest guidance.

References

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

CVE-2026-843138.8
Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, POST…
CVE-2026-1095598.7
EdgeEver Desktop 1.6.26 through 1.112.0 contains a navigation allowlist bypass that…
CVE-2026-1095759.8
In HAProxy Data Plane API 2.2.0 through 3.4.3 (and corresponding Enterprise Edition…
CVE-2026-659548.6
PHPCSUtils is a suite of utility functions for use with PHP_CodeSniffer. From…
CVE-2026-571189.8
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59,…
CVE-2026-773669.9
obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian…

Frequently asked

Is CVE-2026-108263 being actively exploited?

CVE-2026-108263 is not in the CISA KEV catalog. Its EPSS exploit probability is 0.43%.

How severe is CVE-2026-108263?

CVE-2026-108263 has a CVSS 3.1 base score of 9.9, rated critical. EPSS estimates a 0.43% probability of exploitation.

How do I fix CVE-2026-108263?

Apply the vendor's patch or advisory guidance, then verify no affected versions remain across your devices.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2026-108263 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Get Patch this first every Monday

Five vulnerabilities that matter this week, ranked on real exploitation. Plain language, one email, no spam.

You can unsubscribe with one click from every issue. We handle your details as described in our privacy policy.

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.