AstronRPA desktop client versions through 1.1.6 contain a cross‑site scripting flaw in the smart‑component chat component. The client renders language‑model output via Vue’s v‑html without sanitization, allowing an attacker to embed malicious HTML that includes event handlers. When a user interacts with the page, those handlers call the open‑path IPC bridge and inject shell metacharacters, which the bridge then executes as the desktop user, providing remote execution of arbitrary OS commands.

The vulnerability affects the iflytek AstronRPA desktop application, specifically all releases up to and including 1.1.6. Users running these versions on any supported operating system are susceptible if the smart‑component chat feature is enabled.

The CVSS score of 7.7 rates this flaw as High severity. No EPSS data is available, and the vulnerability is not listed in CISA KEV. Attackers can exploit it remotely by delivering crafted content to the chat via a malicious web page. It is inferred that the exploit does not require authentication, as the component handling the IPC bridge does not impose authentication checks, and that the attack can be carried out from any network capable of supplying the malicious page to the vulnerable client.