CVE Tools
Track your stack

Uipath

3 CVEs tracked since 2021. Since Dec 2021, none of them reached CISA KEV.

Uipath CVEs per month

Dec 2021 to Dec 2021. Point at a month, or focus the strip and use the arrow keys.
Uipath CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2021-1230

Products

The products that kept showing up in Uipath's monthly top three, with their CVEs summed over those months.

  1. Assistant21 month
  2. App Studio11 month

Latest CVEs

The 6 most recently published vulnerabilities affecting Uipath.

  1. CVE-2026-45321Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys9.6
  2. CVE-2021-44043An issue was discovered in UiPath App Studio 21.4.4. There is a persistent XSS vulnerability in the file-upload functionality for uploading icons when attempting to create new Apps. An attacker wit...5.4
  3. CVE-2021-44041UiPath Assistant 21.4.4 will load and execute attacker controlled data from the file path supplied to the --dev-widget argument of the URI handler for uipath-assistant://. This allows an attacker t...9.8
  4. CVE-2021-44042An issue was discovered in UiPath Assistant 21.4.4. User-controlled data supplied to the --process-start argument of the URI handler for uipath-assistant:// is not correctly encoded, resulting in a...9.8
  5. CVE-2018-19855UiPath Orchestrator before 2018.3.4 allows CSV Injection, related to the Audit export, Robot log export, and Transaction log export features.5.5
  6. CVE-2018-17305UiPath Orchestrator through 2018.2.4 allows any authenticated user to change the information of arbitrary users (even administrators) leading to privilege escalation and remote code execution.8.8

The record

Peak rank
#193 in Dec 2021
Busiest month shown
Dec 2021, 3 CVEs
Months with a KEV entry
0 since Dec 2021
Monthly snapshots
1 since 2021
Uipath's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store