What happened
NVD published both CVEs (6.3 each) on 2026-09-23: SQL injection in the getBotList API of astron-agent's console backend, and server-side request forgery in the UrlCheckTool.checkUrl of the debugToolV2 endpoint.
Why it matters
An agent-framework bug that lets callers read/modify the agent platform's backend DB (chat-bot marketplace records) and have the platform's own server fetch arbitrary internal URLs — both are remote paths into agent infrastructure rather than model-level attacks.
Attack vector
SQL injection through the unchosenated sortDirection manipulation in getBotList (ChatBotMarket mapper); SSRF by controlling endPoint in the UrlCheckTool used by the debugTool endpoint, both remotely reachable in a deployed agent platform.
Affected systems
iFlytek astron-agent ≤ 1.0.7 (SQLi, CVE-2026-95929); ≤ 1.0.6 (SSRF, CVE-2026-95930)
Mitigation
Upgrade astron-agent beyond 1.0.7 and apply the forthcoming fixes in the iflytek/astron-agent repo; enforce input validation/safe parameterization on sortDirection and SSRF allow/deny lists on endPoint.