CVE-2024-43479

HIGH 8.5CVE-2024-43479 · Published 10/09/2024 · updated 10/08/2026

In short

CVE-2024-43479 is a HIGH (CVSS 8.5) vulnerability affecting power automate (microsoft).
Chance of exploitation in the next 30 days (EPSS): 0.88%, higher than 59.3% of all vulnerabilities.
Fix: update to 2.41.178.24249, 2.42.331.24249, 2.43.249.24249, 2.44.55.24249 or later.

Package	Affected versions	Patched versions
power automate microsoft	`≥ 2.41, < 2.41.178.24249≥ 2.42, < 2.42.331.24249≥ 2.43, < 2.43.249.24249≥ 2.44, < 2.44.55.24249≥ 2.45, < 2.45.404.24249≥ 2.46, < 2.46.181.24249≥ 2.47, < 2.47.119.24249`	`2.41.178.242492.42.331.242492.43.249.242492.44.55.242492.45.404.242492.46.181.242492.47.119.24249`

Microsoft Power Automate Desktop Remote Code Execution Vulnerability

Running one of these products? Scan your site to see whether it exposes a vulnerable version.