CVE-2024-43479 Microsoft Power Automate Desktop Remote Code Execution Vulnerability

Description

Microsoft Power Automate Desktop Remote Code Execution Vulnerability

Affected products and versions

Product	Affected versions	Fixed in
Power Automate for Desktop 1.0	1.0.0.0 → < 2.47.119.24249	2.47.119.24249

Other CVEs of Power Automate for Desktop

The 6 CVEs of Power Automate for Desktop →

CVE-2026-77897 Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally 7.0 High CVE-2026-40374 Exposure of sensitive information to an unauthorized actor in Power Automate allows an authorized attacker to disclose… 6.5 Medium CVE-2025-47966 Exposure of sensitive information to an unauthorized actor in Power Automate allows an unauthorized attacker to… 9.8 Critical CVE-2025-29817 Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network 5.7 Medium