Microsoft Power Automate Desktop Uncontrolled Search Path Element Information Disclosure Vulnerability

A vulnerability exists in Power Automate for Desktop due to an uncontrolled search path element. This flaw allows an authorized attacker to disclose information over a network, potentially including NTLM hashes.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure, specifically NTLM hash values.

Remediation

Users can apply the official security update available through the Microsoft Store to address this vulnerability.