2 CVEs publicados el 2026-10-14 · CVSS máximo 7.3/10.
Producto afectado
AstronRPA 1.1.6
CVEs de este lote
| CVE | Severidad | CVSS | EPSS | Estado | Descripción |
|---|---|---|---|---|---|
| CVE-2026-108548 | HIGH | 7.3 | 0.3% | AstronRPA through 1.1.6 contains an authentication bypass vulnerability in the OpenResty gateway's auth_handler.lua that accepts any Bearer token without validation. | |
| CVE-2026-108547 | MEDIUM | 6.5 | 0.2% | AstronRPA through 1.1.6 contains a missing tenant authorization check in robot-service that allows authenticated users to read other tenants' shared variables via the get-batch-shared-var endpoint. |