automai records
4 published records for vendor automai.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-259 Use of Hard-coded Password1
- CWE-280 Improper Handling of Insufficient Permissions or Privileges1
- CWE-295 Improper Certificate Validation1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
The weakness classes this vendor ships most often: where to look.
CWEAll records
4 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
39Monitor | CVE-2025-46070No exploit | An issue in Automai BotManager v.25.2.0 allows a remote attacker to execute arbitrary code via the BotManager.exe componentautomai · botmanager · CWE-295 | Critical9.8 | 0.5%Jan 12, 2026 |
39Monitor | CVE-2025-46066No exploit | An issue in Automai Director v.25.2.0 allows a remote attacker to escalate privilegesautomai · director · CWE-280 | Critical9.9 | 0.3%Jan 12, 2026 |
35Monitor | CVE-2025-46068No exploit | An issue in Automai Director v.25.2.0 allows a remote attacker to execute arbitrary code via the update mechanismautomai · director · CWE-434 | High8.8 | 0.5%Jan 12, 2026 |
32Monitor | CVE-2025-46067No exploit | An issue in Automai Director v.25.2.0 allows a remote attacker to escalate privileges and obtain sensitive information via a crafted js fileautomai · director · CWE-259 | High8.2 | 0.3%Jan 12, 2026 |
- CVE-2025-4607039Monitor
An issue in Automai BotManager v.25.2.0 allows a remote attacker to execute arbitrary code via the BotManager.exe component
CriticalCVSS 9.8No exploitEPSS 0%automai · botmanagerJan 12, 2026
- CVE-2025-4606639Monitor
An issue in Automai Director v.25.2.0 allows a remote attacker to escalate privileges
CriticalCVSS 9.9No exploitEPSS 0%automai · directorJan 12, 2026
- CVE-2025-4606835Monitor
An issue in Automai Director v.25.2.0 allows a remote attacker to execute arbitrary code via the update mechanism
HighCVSS 8.8No exploitEPSS 0%automai · directorJan 12, 2026
- CVE-2025-4606732Monitor
An issue in Automai Director v.25.2.0 allows a remote attacker to escalate privileges and obtain sensitive information via a crafted js file
HighCVSS 8.2No exploitEPSS 0%automai · directorJan 12, 2026