Microsoft Power Automate For Desktop vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Microsoft Power Automate For Desktop: 2 record(s), with affected versions and fixes.
cpe:2.3:a:microsoft:power_automate_for_desktop

CVE-2026-77897 High · 7.0 CWE-23 Sep 8, 2026

Microsoft Power Automate Desktop Elevation of Privilege Vulnerability

Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally.

CVE-2026-40374 Medium · 6.5 CWE-200 May 12, 2026

Microsoft Power Automate Desktop Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Power Automate allows an authorized attacker to disclose information over a network.