CVE-2026-108159

Summary

AstronRPA's desktop client contains a cross-site scripting vulnerability in its smart-component chat that allows remote attackers to execute OS commands by injecting malicious HTML into LLM responses. This occurs when unsanitized LLM output is rendered via v-html, enabling attackers to abuse IPC handlers with shell metacharacters.

Exploitability

Exploitation requires a victim to visit a malicious web page containing prompt-injection content that tricks the LLM into generating HTML event handlers, making it moderately difficult but possible with user interaction.

Blast radius

If exploited, attackers could execute arbitrary OS commands as the desktop user, potentially leading to full system compromise, data exfiltration, or lateral movement within the local network.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 1.1.7 or later to address this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.