CVEvulnerability

CVE-2025-21187

7.8 HIGH Published 2025-01-14 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-01-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-94

Description

Microsoft Power Automate Remote Code Execution Vulnerability

Affected configurations

• microsoft power automate for desktop (>= 2.46 < 2.46.184.25013) • microsoft power automate for desktop (>= 2.47 < 2.47.126.25010) • microsoft power automate for desktop (>= 2.48 < 2.48.164.25010) • microsoft power automate for desktop (>= 2.49 < 2.49.182.25010) • microsoft power automate for desktop (>= 2.50 < 2.50.139.25010) • microsoft power automate for desktop (>= 2.51 < 2.51.349.24355)

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References