EUVD-2026-66765

A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account...

CVE-2026-64632

A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account...

CVE-2021-44041: Externally Controlled Reference to a Resource in Another Sphere

UiPath Assistant 21.4.4 will load and execute attacker controlled data from the file path supplied to the --dev-widget argument of the URI handler for uipath-assistant://. This allows an attacker to execute code on a victim's machine or capture NTLM credentials by supplying a networked or WebDAV...