medium5.7
CVE-2025-29817
Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network.
Impact
Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Power Automate For Desktop | before 2.51.349.24355 |