Though these flaws have been apparently fixed in both LastPass and RoboForm, what's unclear is whether they've been exploited, though no reports have surfaced that indicate such is the case.
As a precaution, I would change the master password at minimum. But a good idea to do so on a regular basis anyway.
As a side note, I did some quick testing some time ago of different methods for protecting passwords against a few software keyloggers, and found that I couldn't compromise any using the browser's built-in password manager, specifically in Firefox. Of course, this assuming no unknown flaws exist in the browser that would allow it to do so.
With LastPass, I was able to capture the login credentials, which could allow access into the user's online account containing the password database. This is not a flaw with LastPass, but should act as a warning to how dangerous keyloggers can be. Especially, since keyloggers are typically designed to operate in stealth mode, and can be very difficult to uncover. My real-time AV software couldn't detect it. Malwarebytes did.
