Use of hard-coded cryptographic key issue exists in BizRobo! all versions. Credentials inside robot files may be obtained if the encryption key is available. The vendor provides the workaround information and recommends to apply it to the deployment environment.

Use of hard-coded cryptographic key issue exists in BizRobo! all versions. Credentials inside robot files may be obtained if the encryption key is available. The vendor provides the workaround information and recommends to apply it to the deployment environment.

BizRobo! is an RPA (Robotic Process Automation) software provided by OPEN, Inc. Users compile an automation flow using DesignStudio, a development application that runs on Windows, and create robot files. A web application Management Console is provided to schedule RPA execution and to check the execution logs. BizRobo! contains multiple vulnerabilities listed below. <ul><li>Use of hard-coded cryptographic key (CWE-321) - CVE-2025-31362</li><li>Deserialization of untrusted data in the import function (CWE-502) - <a href="https://www.cve.org/CVERecord?id=CVE-2013-7285">CVE-2013-7285</a></li><li>Deserialization of untrusted data in Design Studio license authorization (CWE-502) - CVE-2025-31932</li></ul> Masamu Asato of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.