> CVE-2026-40374 Microsoft Power Automate Desktop Information Disclosure Vulnerability

[SOURCE] Microsoft Security Update Guide [DATE: 12/05/2026 14:00] [LANGUAGE: EN]

Exposure of sensitive information to an unauthorized actor in Power Automate allows an authorized attacker to disclose information over a network.