CVE-2025-46070

An issue in Automai BotManager v.25.2.0 allows a remote attacker to execute arbitrary code via the BotManager.exe component

Critical · published January 12, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
43.5
In the wild
Unconfirmed
What it is

🔥 A remote attacker can execute arbitrary code on your system through a single flaw in Automai BotManager v.25.2.0 — that’s like leaving your front door wide open for anyone to stroll right in! Think of BotManager.exe as the control tower at an airport. If a hacker finds a way to take control of that tower, they could redirect flights, endangering everything in the airspace. It’s a serious breach of trust in your operations! An attacker could exploit this vulnerability to run any code they want on your system, potentially leading to data theft, unauthorized access, or complete system takeover. This is absolutely devastating and could disrupt your entire operations, putting sensitive information and resources at risk!

Put simply

Think of BotManager.exe as the control tower at an airport. If a hacker finds a way to take control of that tower, they could redirect flights, endangering everything in the airspace. It’s a serious breach of trust in your operations! This vulnerability in Automai BotManager allows remote code execution through the BotManager.exe component, enabling attackers to execute arbitrary commands without proper verification or control.

What to do

An attacker could exploit this vulnerability to run any code they want on your system, potentially leading to data theft, unauthorized access, or complete system takeover. This is absolutely devastating and could disrupt your entire operations, putting sensitive information and resources at risk! Immediately patch your Automai BotManager to version 25.3.0 or later to mitigate this critical vulnerability. Review your system settings to ensure no unauthorized code is running, and consider employing additional security measures like firewalls and intrusion detection systems. You've got this! Stay proactive and secure your environment — it’s totally fixable! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00523 · 43.5th percentile
Published
2026-01-12T00:00Z
EPSS history
Timeline
  • 12 JAN 00:00Z
    An issue in Automai BotManager v.25.2.0 allows a remote attacker to execute arbitrary code via the BotManager.exe component
    cvelistv5