Login Request a demo
AS
Product
astron-rpa
by iflytek · last CVE Oct 14, 2026
5
CVEs
0
On KEV
7.5
Max CVSS
5
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 3Medium 2Low 0
Severity
All severities5Critical0High3Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add astron-rpa to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-108160
7.5
0%
Oct 9
AstronRPA through 1.1.6 Unsigned Update Installation via Plain-HTTP Feed
Affected: through 1.1.6
CVE-2026-108159
7.5
0%
Oct 9
AstronRPA through 1.1.6 RCE via Smart-Component Chat XSS and IPC Bridge
Affected: through 1.1.6
CVE-2026-108548
7.3
0%
Oct 10
AstronRPA through 1.1.6 Authentication Bypass via Arbitrary Bearer Token
Affected: through 1.1.6
CVE-2026-108547
6.5
0%
Oct 10
AstronRPA through 1.1.6 Cross-Tenant Shared Variable Disclosure via get-batch-shared-var
Affected: through 1.1.6
CVE-2026-110764
5.3
0%
Oct 14
AstronRPA through 1.1.6 Cross-Tenant File Disclosure via /file/download
Affected: through 1.1.6
Showing 5