CVE-2022-29856: Automationanywhere Automation 360

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

A hardcoded cryptographic key in Automation360 22 allows an attacker to decrypt exported RPA packages.

Affected products

• Automationanywhere Automation 360: version 22 only

Published 2022-04-29. Last modified 2026-06-17.