CVE-2025-29817

CVE-2025-29817 affects Microsoft Power Automate Desktop. The issue is an uncontrolled search path element in Power Automate that an authorized attacker can exploit to disclose information over a network, with Confidentiality impact HIGH per CVSS. The Connected sources (Microsoft MSRC entry and co...

CVE-2026-40374

CVE-2026-40374 concerns Exposure of sensitive information to an unauthorized actor in Power Automate Desktop. The connected documents indicate an information disclosure vulnerability affecting Power Automate Desktop, with a CVSS v3.1 base score of 6.5 (NETWORK, LOW attack complexity, PRIVILEGES R...

CVE-2026-77897

CVE-2026-77897 is a relative path traversal vulnerability in Microsoft Power Automate Desktop that allows an authorized attacker to escalate privileges locally . The vulnerability requires local access with low privileges and has a high attack complexity, as reflected by the CVSS 3.1 score of 7.0...