PatchTheCVE: automoxhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2022-36122: The Automox Agent before 40 on Windows incorrectly sets permissions on key files.https://patchthecve.com/cve/CVE-2022-36122.htmlhttps://patchthecve.com/cve/CVE-2022-36122.htmlWed, 17 Jun 2026 04:52:57 +0000HIGH 7.8: The Automox Agent before 40 on Windows incorrectly sets permissions on key files.CVE-2022-27904: Automox Agent for macOS before version 39 was vulnerable to a time-of-check/time-of-use (TOCTOU) race-conditiohttps://patchthecve.com/cve/CVE-2022-27904.htmlhttps://patchthecve.com/cve/CVE-2022-27904.htmlWed, 17 Jun 2026 04:37:43 +0000HIGH 7.0: Automox Agent for macOS before version 39 was vulnerable to a time-of-check/time-of-use (TOCTOU) race-condition attack during the agent install process.CVE-2022-24308: Automox Agent prior to version 37 on Windows and Linux and Version 36 on OSX could allow for a non privileged https://patchthecve.com/cve/CVE-2022-24308.htmlhttps://patchthecve.com/cve/CVE-2022-24308.htmlWed, 17 Jun 2026 04:31:35 +0000MEDIUM 5.5: Automox Agent prior to version 37 on Windows and Linux and Version 36 on OSX could allow for a non privileged user to obtain sensitive information during the install process.CVE-2021-43326: Automox Agent before 32 on Windows incorrectly sets permissions on a temporary directory.https://patchthecve.com/cve/CVE-2021-43326.htmlhttps://patchthecve.com/cve/CVE-2021-43326.htmlWed, 17 Jun 2026 04:10:51 +0000HIGH 7.8: Automox Agent before 32 on Windows incorrectly sets permissions on a temporary directory.CVE-2021-43325: Automox Agent 33 on Windows incorrectly sets permissions on a temporary directoryhttps://patchthecve.com/cve/CVE-2021-43325.htmlhttps://patchthecve.com/cve/CVE-2021-43325.htmlWed, 17 Jun 2026 04:10:51 +0000HIGH 7.8: Automox Agent 33 on Windows incorrectly sets permissions on a temporary directory. NOTE: this issue exists because of a CVE-2021-43326 regression.CVE-2021-26909: Automox Agent prior to version 31 uses an insufficiently protected S3 bucket endpoint for storing sensitive fihttps://patchthecve.com/cve/CVE-2021-26909.htmlhttps://patchthecve.com/cve/CVE-2021-26909.htmlWed, 17 Jun 2026 03:43:58 +0000LOW 3.7: Automox Agent prior to version 31 uses an insufficiently protected S3 bucket endpoint for storing sensitive files, which could be brute-forced by an attacker to subvert an organization's security program. The issue has since been fixed in version 31 of the Automox Agent.CVE-2021-26908: Automox Agent prior to version 31 logs potentially sensitive information in local log files, which could be ushttps://patchthecve.com/cve/CVE-2021-26908.htmlhttps://patchthecve.com/cve/CVE-2021-26908.htmlWed, 17 Jun 2026 03:43:58 +0000LOW 3.3: Automox Agent prior to version 31 logs potentially sensitive information in local log files, which could be used by a locally-authenticated attacker to subvert an organization's security program. The issue has since been fixed in version 31 of the Automox Agent.