Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Natro Macro is an open-source Bee Swarm Simulator macro written in AutoHotkey. Prior to version 1.1.0, any ahk code contained inside of a pattern or path file is executed by the macro. Since users commonly share path/pattern files, an attacker could share a file containing malicious code, which is then executed by the program. This code can operate in silence alongside the pattern, running in the background to do whatever the attacker pleases. This issue has been patched in version 1.1.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-28801 Natro Macro is an open-source Bee Swarm Simulator macro written in AutoHotkey. Prior to version 1.1.0, any ahk code contained inside of a pattern or path file is exec… https://www.cve.org/CVERecord?id=CVE-2026-28801
Post summary
The CVE highlights that Natro macro allows execution of AutoHotkey code via pattern or path files before version 1.1.0, but no PoC, exploitation, patch, or active use is reported.
CVE-2026-28801 Remote Code Execution in Natro Macro Bee Swarm Simulator Prior to Versio... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-28801 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
The post announces CVE-2026-28801, a Remote Code Execution vulnerability in Natro Macro Bee Swarm Simulator prior to a certain version, and provides links for further details but no exploitation or mitigation information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | natroteam | natro_macro | - | - | - |