CVE-2021-44041

UiPath Assistant 21.4.4 will load and execute attacker controlled data from the file path supplied to the --dev-widget argument of the URI handler for uipath-assistant://. This allows an attacker to execute code on a victim's machine or capture NTLM credentials by supplying a networked or WebDAV...

CVE-2021-44041

CVE-2021-44041 affects UiPath Assistant (version 21.4.4) and stems from the URI handler for uipath-assistant:// accepting a file path via the --dev-widget argument. An attacker could load and execute attacker-controlled data from a networked or WebDAV file path, enabling code execution on the vic...