CVE-2026-28801
Last modified
CVE-2026-28801 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Natro Macro is an open-source Bee Swarm Simulator macro written in AutoHotkey. Prior to version 1.1.0, any ahk code contained inside of a pattern or path file is executed by the macro. EPSS estimates a 0.12% chance of exploitation in the next 30 days.
Description
Natro Macro is an open-source Bee Swarm Simulator macro written in AutoHotkey. Prior to version 1.1.0, any ahk code contained inside of a pattern or path file is executed by the macro. Since users commonly share path/pattern files, an attacker could share a file containing malicious code, which is then executed by the program. This code can operate in silence alongside the pattern, running in the background to do whatever the attacker pleases. This issue has been patched in version 1.1.0.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Natroteam | Natro Macro | < 1.1.0 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-28801?
How severe is CVE-2026-28801?
How do I fix CVE-2026-28801?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-28795OpenChatBI is an intelligent chat-based BI tool powered by l…9.8
- CVE-2026-28797RAGFlow is an open-source RAG (Retrieval-Augmented Generatio…8.8
- CVE-2026-28798ZimaOS is a fork of CasaOS, an operating system for Zima dev…10
- CVE-2026-28799PJSIP is a free and open source multimedia communication lib…7.5
- CVE-2026-2880A vulnerability in @fastify/middie versions < 9.2.0 can resu…9.1
- CVE-2026-28800Natro Macro is an open-source Bee Swarm Simulator macro writ…8
- CVE-2026-28802Authlib is a Python library which builds OAuth and OpenID Co…9.8
- CVE-2026-28803Open Forms allows users create and publish smart forms. Prio…6.5
- CVE-2026-28804pypdf is a free and open-source pure-python PDF library. Pri…5.3
- CVE-2026-28805OpenSTAManager is an open source management software for tec…8.8
- CVE-2026-28806Improper Authorization vulnerability in nerves-hub nerves_hu…8.8
- CVE-2026-28807Improper Limitation of a Pathname to a Restricted Directory …7.5
Are you affected by CVE-2026-28801?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST