Tag

Rpa

1 brief RSS

Remote Command Execution in AstronRPA via LLM-Driven XSS

AstronRPA versions 1.1.6 and earlier contain a cross-site scripting vulnerability in the smart-component chat that allows remote attackers to trigger arbitrary OS command execution by injecting malicious prompt content.

AstronRPA vulnerability rce xss authentication-bypass api-security rpa

1r 4t 1c updated 2h ago