Is CVE-2026-108159 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-108159 being exploited in the wild.

How severe is CVE-2026-108159?

High severity, with a CVSS score of 7.5, published 9 October 2026.

Which products and versions are affected?

iFlytek AstronRPA through 1.1.6.

Is there a fix for CVE-2026-108159?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-108159 attacked?

It is attacked over the network.

Am I affected by CVE-2026-108159?

Check whether you run iFlytek AstronRPA at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-108159: AstronRPA cross-site scripting in smart-component chat

CVE-2026-108159 · Severity: high · CVSS 7.5 · Published 2026-10-09

AstronRPA is a desktop automation tool that includes an AI-powered chat component. A cross-site scripting vulnerability in the chat allows attackers to inject malicious HTML into LLM responses, which can be executed to run operating system commands with the privileges of the user running the desktop client. An attacker could gain remote code execution on affected machines through prompt injection attacks embedded in web pages.

Technologies: iFlytek AstronRPA. Vendors: iFlytek.

Quick answers

Is CVE-2026-108159 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-108159 being exploited in the wild.
How severe is CVE-2026-108159?: High severity, with a CVSS score of 7.5, published 9 October 2026.
Which products and versions are affected?: iFlytek AstronRPA through 1.1.6.
Is there a fix for CVE-2026-108159?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-108159 attacked?: It is attacked over the network.
Am I affected by CVE-2026-108159?: Check whether you run iFlytek AstronRPA at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The desktop client's smart-component chat renders unsanitized LLM output via v-html, enabling XSS. Attackers can craft prompt-injection payloads that cause the LLM to emit HTML event handlers; these handlers invoke an unrestricted open-path IPC mechanism that accepts shell metacharacters, allowing arbitrary OS command execution. The attack is remote but requires user interaction (visiting a web page with injected content) and works against AstronRPA versions through 1.1.6.

Affected products

iflytek AstronRPA through 1.1.6

Timeline

2026-10-09: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.