Microsoft Power Automate Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in Microsoft Power Automate for Desktop, specifically in version 2.51 and prior to 2.52. This vulnerability allows for arbitrary code execution, with exploitation requiring user interaction.

Impact

Exploitation of this vulnerability could lead to remote code execution on the affected system.

Remediation

Users of Microsoft Power Automate for Desktop version 2.51 will be notified about the availability of version 2.52, which includes the fix for this vulnerability. Users running versions between 2.46 and 2.50 can refer to the Microsoft Update Catalog for download links to the fixed versions.