Release date: 7 April 2022

Known Issues

As a host, trying to end a maintenance window through Swagger UI may fail. This happens because Swagger UI uses cookies for authentication, which are lost when you close the browser.
To end the maintenance mode via API, use one of the following workarounds:

• Do not close the browser and make the POST request to /api/Maintenance/End from the Swagger UI.
• Use an API testing application (for example, Postman) to:
  retrieve an access token by exchanging your credentials to the /api.Account/Authenticate endpoint, and then
  make a POST request to the /api/Maintenance/End endpoint using the Authorization: Bearer {access_token} header.

Bug Fixes

An issue was fixed that would allow an attacker with privileged access to a robot to retrieve the LicenseKey (MachineKey) of other robots within the same tenant by brute forcing API calls to Orchestrator. This would theoretically allow the attacker to access resources restricted only to that robot.
Read the security advisory for UiPath - Robot Account Takeover.