- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/24/2026, astron-rpa recorded 5 security vulnerabilities in the last 90 days, of which 3 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of astron-rpa and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-110764AstronRPA through 1.1.6 Cross-Tenant File Disclosure via /file/downloadCVE-2026-108548AstronRPA through 1.1.6 Authentication Bypass via Arbitrary Bearer TokenCVE-2026-108547AstronRPA through 1.1.6 Cross-Tenant Shared Variable Disclosure via get-batch-shared-varCVE-2026-108160AstronRPA through 1.1.6 Unsigned Update Installation via Plain-HTTP FeedCVE-2026-108159AstronRPA through 1.1.6 RCE via Smart-Component Chat XSS and IPC Bridge| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-110764AstronRPA through 1.1.6 Cross-Tenant File Disclosure via /file/download | Exploitation statusActively exploited | FixYes | Published10/14/2026 | SeverityMedium |
CVE-2026-108548AstronRPA through 1.1.6 Authentication Bypass via Arbitrary Bearer Token | Exploitation statusNot exploited | FixYes | Published10/10/2026 | SeverityMedium |
CVE-2026-108547AstronRPA through 1.1.6 Cross-Tenant Shared Variable Disclosure via get-batch-shared-var | Exploitation statusNot exploited | FixYes | Published10/10/2026 | SeverityHigh |
CVE-2026-108160AstronRPA through 1.1.6 Unsigned Update Installation via Plain-HTTP Feed | Exploitation statusNot exploited | FixYes | Published10/09/2026 | SeverityHigh |
CVE-2026-108159AstronRPA through 1.1.6 RCE via Smart-Component Chat XSS and IPC Bridge | Exploitation statusNot exploited | FixYes | Published10/09/2026 | SeverityHigh |
5 Results | Page 1 of 1