A hardcoded cryptographic key in Automation360 22 allows an attacker to decrypt exported RPA packages.