CVE-2021-44042

CVE-2021-44042 is a critical vulnerability affecting UiPath Assistant version 21.4.4, where improper encoding of user-controlled data in the --process-start argument of the URI handler allows for content injection. This could enable an attacker to execute JavaScript within the Electron application context. With a CVSS score of 9.8 (CRITICAL), it presents a high-severity risk with a network attack vector and low attack complexity, potentially leading to complete compromise of confidentiality, integrity, and availability. There is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.