CVE-2021-44041

CVE-2021-44041 affects UiPath Assistant (version 21.4.4) and stems from the URI handler for uipath-assistant:// accepting a file path via the --dev-widget argument. An attacker could load and execute attacker-controlled data from a networked or WebDAV file path, enabling code execution on the vic...

CVE-2021-44042

CVE-2021-44042 affects UiPath Assistant 21.4.4. User-provided data in the --process-start argument of the uipath-assistant:// URI handler is not properly encoded, allowing attacker-controlled content to appear in the error message and potentially execute JavaScript within the Electron-based UI. T...