PT-2026-108979 · Unknown · Astron-Rpa
CVSS v3.1
7.5
عالية
| المتجه | AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
AstronRPA versions prior to 1.1.7
Description
The desktop client's auto-update mechanism fails to perform integrity checks on downloaded code. Network attackers positioned between the client and server can deliver a malicious update manifest and NSIS installer. Because the
electron-updater component installs these files without signature verification, it allows for the execution of arbitrary code with the privileges of the desktop user.Recommendations
Update AstronRPA to version 1.1.7 or later.
إصلاح
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
تصنيف نقاط الضعف
المعرّفات ذات الصلة
المنتجات المتأثرة
Astron-Rpa