Search
Find a vulnerability
Search criteria
14 vulnerabilities by activepieces
CVE-2026-73084 (GCVE-0-2026-73084)
Vulnerability from nvd – Published: 2026-08-11 16:35 – Updated: 2026-08-12 22:13
VLAI
EPSS
VEX
Title
Activepieces: Reflected Cross-Site Scripting in OAuth Redirect Endpoint
Summary
Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /api/redirect OAuth callback endpoint embeds the user-supplied code query parameter directly into an inline script block without proper escaping. A crafted request to /api/redirect with a malicious code value can break out of the script context and execute arbitrary JavaScript in the Activepieces origin when a logged-in user opens it. An unauthenticated attacker can access the victim's session tokens or make authenticated API calls on the victim's behalf. This issue is fixed in version 0.83.0.
Severity
6.1 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-12 22:07 UTC
CWE
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/activepieces/activepieces/secu… | x_refsource_CONFIRM |
| https://github.com/activepieces/activepieces/comm… | x_refsource_MISC |
| https://github.com/activepieces/activepieces/rele… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| activepieces | activepieces |
Affected:
< 0.83.0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-73084",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-12T22:07:51.635074Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-12T22:13:48.236Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "activepieces",
"vendor": "activepieces",
"versions": [
{
"status": "affected",
"version": "\u003c 0.83.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /api/redirect OAuth callback endpoint embeds the user-supplied code query parameter directly into an inline script block without proper escaping. A crafted request to /api/redirect with a malicious code value can break out of the script context and execute arbitrary JavaScript in the Activepieces origin when a logged-in user opens it. An unauthenticated attacker can access the victim\u0027s session tokens or make authenticated API calls on the victim\u0027s behalf. This issue is fixed in version 0.83.0."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-11T16:35:06.492Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/activepieces/activepieces/security/advisories/GHSA-hc39-cm5m-q8g7",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/activepieces/activepieces/security/advisories/GHSA-hc39-cm5m-q8g7"
},
{
"name": "https://github.com/activepieces/activepieces/commit/8be4c8d5e6a79ccbaa74815027432a3c8c311385",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/activepieces/activepieces/commit/8be4c8d5e6a79ccbaa74815027432a3c8c311385"
},
{
"name": "https://github.com/activepieces/activepieces/releases/tag/0.83.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/activepieces/activepieces/releases/tag/0.83.0"
}
],
"source": {
"advisory": "GHSA-hc39-cm5m-q8g7",
"discovery": "UNKNOWN"
},
"title": "Activepieces: Reflected Cross-Site Scripting in OAuth Redirect Endpoint"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-73084",
"datePublished": "2026-08-11T16:35:06.492Z",
"dateReserved": "2026-08-10T19:37:41.445Z",
"dateUpdated": "2026-08-12T22:13:48.236Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-73083 (GCVE-0-2026-73083)
Vulnerability from nvd – Published: 2026-08-11 16:33 – Updated: 2026-08-13 15:01
VLAI
EPSS
VEX
Title
Activepieces: V8 Isolate Sandbox Bypass via importFresh Module Loading
Summary
Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, in SANDBOX_CODE_ONLY mode, the engine loads the compiled user module with importFresh(), a wrapper around Node.js require(), before the V8 isolate is applied. Top-level module code can therefore call require('child_process'), access fs, and use other Node.js APIs in the host engine process outside the sandbox. An authenticated user who can create a Code step can read environment secrets including AP_ENCRYPTION_KEY and AP_JWT_SECRET, read or write files, and reach internal services. This issue is fixed in version 0.80.0.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-13 15:01 UTC
CWE
- CWE-693 - Protection Mechanism Failure
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://github.com/activepieces/activepieces/secu… | x_refsource_CONFIRM |
| https://github.com/activepieces/activepieces/rele… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| activepieces | activepieces |
Affected:
< 0.80.0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-73083",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-13T15:01:31.190281Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-13T15:01:34.037Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "activepieces",
"vendor": "activepieces",
"versions": [
{
"status": "affected",
"version": "\u003c 0.80.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, in SANDBOX_CODE_ONLY mode, the engine loads the compiled user module with importFresh(), a wrapper around Node.js require(), before the V8 isolate is applied. Top-level module code can therefore call require(\u0027child_process\u0027), access fs, and use other Node.js APIs in the host engine process outside the sandbox. An authenticated user who can create a Code step can read environment secrets including AP_ENCRYPTION_KEY and AP_JWT_SECRET, read or write files, and reach internal services. This issue is fixed in version 0.80.0."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 7.6,
"baseSeverity": "HIGH",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-693",
"description": "CWE-693: Protection Mechanism Failure",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-11T16:33:22.045Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/activepieces/activepieces/security/advisories/GHSA-gr3h-c2j7-r52g",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/activepieces/activepieces/security/advisories/GHSA-gr3h-c2j7-r52g"
},
{
"name": "https://github.com/activepieces/activepieces/releases/tag/0.80.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/activepieces/activepieces/releases/tag/0.80.0"
}
],
"source": {
"advisory": "GHSA-gr3h-c2j7-r52g",
"discovery": "UNKNOWN"
},
"title": "Activepieces: V8 Isolate Sandbox Bypass via importFresh Module Loading"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-73083",
"datePublished": "2026-08-11T16:33:22.045Z",
"dateReserved": "2026-08-10T19:37:41.445Z",
"dateUpdated": "2026-08-13T15:01:34.037Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-73082 (GCVE-0-2026-73082)
Vulnerability from nvd – Published: 2026-08-11 16:30 – Updated: 2026-08-11 17:53
VLAI
EPSS
VEX
Title
Activepieces: Server-side request forgery in MCP tool validation endpoint
Summary
Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the POST /api/v1/projects/:projectId/mcp-server/validate-agent-mcp-tool endpoint makes an outbound HTTP or SSE request to a user-supplied serverUrl without URL validation or SSRF protection. An authenticated user can cause the Activepieces server to connect to internal services, cloud metadata endpoints, or arbitrary external hosts and probe network reachability from the Activepieces host. This issue is fixed in version 0.82.0.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-11 17:53 UTC
CWE
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/activepieces/activepieces/secu… | x_refsource_CONFIRM |
| https://github.com/activepieces/activepieces/pull/12721 | x_refsource_MISC |
| https://github.com/activepieces/activepieces/comm… | x_refsource_MISC |
| https://github.com/activepieces/activepieces/rele… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| activepieces | activepieces |
Affected:
< 0.82.0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-73082",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-11T17:53:39.626409Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-11T17:53:53.473Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "activepieces",
"vendor": "activepieces",
"versions": [
{
"status": "affected",
"version": "\u003c 0.82.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the POST /api/v1/projects/:projectId/mcp-server/validate-agent-mcp-tool endpoint makes an outbound HTTP or SSE request to a user-supplied serverUrl without URL validation or SSRF protection. An authenticated user can cause the Activepieces server to connect to internal services, cloud metadata endpoints, or arbitrary external hosts and probe network reachability from the Activepieces host. This issue is fixed in version 0.82.0."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-918",
"description": "CWE-918: Server-Side Request Forgery (SSRF)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-11T16:30:02.590Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/activepieces/activepieces/security/advisories/GHSA-7qx9-q4xx-rh59",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/activepieces/activepieces/security/advisories/GHSA-7qx9-q4xx-rh59"
},
{
"name": "https://github.com/activepieces/activepieces/pull/12721",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/activepieces/activepieces/pull/12721"
},
{
"name": "https://github.com/activepieces/activepieces/commit/d385079cf4a9f35ddf61ba68ecda6ac8d64cf9e1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/activepieces/activepieces/commit/d385079cf4a9f35ddf61ba68ecda6ac8d64cf9e1"
},
{
"name": "https://github.com/activepieces/activepieces/releases/tag/0.82.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/activepieces/activepieces/releases/tag/0.82.0"
}
],
"source": {
"advisory": "GHSA-7qx9-q4xx-rh59",
"discovery": "UNKNOWN"
},
"title": "Activepieces: Server-side request forgery in MCP tool validation endpoint"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-73082",
"datePublished": "2026-08-11T16:30:02.590Z",
"dateReserved": "2026-08-10T19:37:41.445Z",
"dateUpdated": "2026-08-11T17:53:53.473Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-73081 (GCVE-0-2026-73081)
Vulnerability from nvd – Published: 2026-08-11 16:28 – Updated: 2026-08-12 14:40
VLAI
EPSS
VEX
Title
Activepieces: Remote Code Execution via Command Injection in Code Step Name
Summary
Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-compilation pipeline builds the on-disk path for a Code step from the step's name and passes that path to a shell-invoked build command. A step name containing shell metacharacters can break out of the intended build invocation and execute arbitrary commands during compilation before any code sandbox is created. An authenticated user with permission to create or edit a flow can execute commands as the worker process user, read and write the worker filesystem, exfiltrate environment secrets, and reach internal services available to the worker. This issue is fixed in version 0.80.0.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-12 14:40 UTC
CWE
- CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://github.com/activepieces/activepieces/secu… | x_refsource_CONFIRM |
| https://github.com/activepieces/activepieces/rele… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| activepieces | activepieces |
Affected:
< 0.80.0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-73081",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-12T14:40:37.545297Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-12T14:40:52.532Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "activepieces",
"vendor": "activepieces",
"versions": [
{
"status": "affected",
"version": "\u003c 0.80.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker\u0027s code-compilation pipeline builds the on-disk path for a Code step from the step\u0027s name and passes that path to a shell-invoked build command. A step name containing shell metacharacters can break out of the intended build invocation and execute arbitrary commands during compilation before any code sandbox is created. An authenticated user with permission to create or edit a flow can execute commands as the worker process user, read and write the worker filesystem, exfiltrate environment secrets, and reach internal services available to the worker. This issue is fixed in version 0.80.0."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "LOW",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-11T16:28:11.777Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/activepieces/activepieces/security/advisories/GHSA-3pfv-m69p-5fv5",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/activepieces/activepieces/security/advisories/GHSA-3pfv-m69p-5fv5"
},
{
"name": "https://github.com/activepieces/activepieces/releases/tag/0.80.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/activepieces/activepieces/releases/tag/0.80.0"
}
],
"source": {
"advisory": "GHSA-3pfv-m69p-5fv5",
"discovery": "UNKNOWN"
},
"title": "Activepieces: Remote Code Execution via Command Injection in Code Step Name"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-73081",
"datePublished": "2026-08-11T16:28:11.777Z",
"dateReserved": "2026-08-10T19:37:41.445Z",
"dateUpdated": "2026-08-12T14:40:52.532Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-48499 (GCVE-0-2026-48499)
Vulnerability from nvd – Published: 2026-07-30 17:10 – Updated: 2026-07-30 18:07
VLAI
EPSS
VEX
Title
Activepieces: Cross-tenant data exposure and code injection via the Code piece sandbox cache
Summary
Activepieces is an open source AI workflow automation platform. Prior to 0.84.0, an unsanitized path segment in the Code piece sandbox can let an authenticated flow author reach read-write cached flow and code files belonging to other tenants on the same worker, exposing embedded data and allowing modified code to execute on a victim tenant's next flow run. This issue is fixed in version 0.84.0.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-07-30 18:06 UTC
CWE
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/activepieces/activepieces/secu… | x_refsource_CONFIRM |
| https://github.com/activepieces/activepieces/comm… | x_refsource_MISC |
| https://github.com/activepieces/activepieces/rele… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| activepieces | activepieces |
Affected:
< 0.84.0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-48499",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-30T18:06:03.876322Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-07-30T18:07:34.332Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "activepieces",
"vendor": "activepieces",
"versions": [
{
"status": "affected",
"version": "\u003c 0.84.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Activepieces is an open source AI workflow automation platform. Prior to 0.84.0, an unsanitized path segment in the Code piece sandbox can let an authenticated flow author reach read-write cached flow and code files belonging to other tenants on the same worker, exposing embedded data and allowing modified code to execute on a victim tenant\u0027s next flow run. This issue is fixed in version 0.84.0."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-285",
"description": "CWE-285: Improper Authorization",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-668",
"description": "CWE-668: Exposure of Resource to Wrong Sphere",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-732",
"description": "CWE-732: Incorrect Permission Assignment for Critical Resource",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-30T17:10:28.347Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/activepieces/activepieces/security/advisories/GHSA-5h2x-g6m3-grmq",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/activepieces/activepieces/security/advisories/GHSA-5h2x-g6m3-grmq"
},
{
"name": "https://github.com/activepieces/activepieces/commit/9d8d328424bd32d295c5727af7550e1b57f9074d",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/activepieces/activepieces/commit/9d8d328424bd32d295c5727af7550e1b57f9074d"
},
{
"name": "https://github.com/activepieces/activepieces/releases/tag/0.84.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/activepieces/activepieces/releases/tag/0.84.0"
}
],
"source": {
"advisory": "GHSA-5h2x-g6m3-grmq",
"discovery": "UNKNOWN"
},
"title": "Activepieces: Cross-tenant data exposure and code injection via the Code piece sandbox cache"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-48499",
"datePublished": "2026-07-30T17:10:28.347Z",
"dateReserved": "2026-05-21T15:33:08.292Z",
"dateUpdated": "2026-07-30T18:07:34.332Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-53536 (GCVE-0-2026-53536)
Vulnerability from nvd – Published: 2026-07-16 18:48 – Updated: 2026-07-18 03:06
VLAI
EPSS
VEX
Title
Activepieces: Cross-tenant file download via missing JWT audience check on step-files signed URL
Summary
Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /v1/step-files/signed download endpoint verified the supplied JWT against the shared signing secret but did not check the token's audience, and combined with a missing null-check on the decoded fileId, this allowed any caller holding any valid Activepieces JWT (including a freshly created user's own access token) to receive a step-file belonging to another tenant. The file returned was whatever PostgreSQL happened to scan first for type = FLOW_STEP_FILE, varying over time as the database changed, so an authenticated user could obtain step-file attachments belonging to other tenants on the same instance; the attacker could not target a specific victim or file, and the access was read-only with no integrity or availability impact. This issue is fixed in version 0.83.0.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-07-18 03:06 UTC
CWE
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/activepieces/activepieces/secu… | x_refsource_CONFIRM |
| https://github.com/activepieces/activepieces/comm… | x_refsource_MISC |
| https://github.com/activepieces/activepieces/comm… | x_refsource_MISC |
| https://github.com/activepieces/activepieces/rele… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| activepieces | activepieces |
Affected:
< 0.83.0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-53536",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-18T03:06:39.776622Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-07-18T03:06:51.360Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "activepieces",
"vendor": "activepieces",
"versions": [
{
"status": "affected",
"version": "\u003c 0.83.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /v1/step-files/signed download endpoint verified the supplied JWT against the shared signing secret but did not check the token\u0027s audience, and combined with a missing null-check on the decoded fileId, this allowed any caller holding any valid Activepieces JWT (including a freshly created user\u0027s own access token) to receive a step-file belonging to another tenant. The file returned was whatever PostgreSQL happened to scan first for type = FLOW_STEP_FILE, varying over time as the database changed, so an authenticated user could obtain step-file attachments belonging to other tenants on the same instance; the attacker could not target a specific victim or file, and the access was read-only with no integrity or availability impact. This issue is fixed in version 0.83.0."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-345",
"description": "CWE-345: Insufficient Verification of Data Authenticity",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "CWE-639: Authorization Bypass Through User-Controlled Key",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-16T18:48:30.875Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/activepieces/activepieces/security/advisories/GHSA-9723-fmff-mc24",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/activepieces/activepieces/security/advisories/GHSA-9723-fmff-mc24"
},
{
"name": "https://github.com/activepieces/activepieces/commit/2cb6148010a6c2a22900f4c8b08d75cc5c921d1c",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/activepieces/activepieces/commit/2cb6148010a6c2a22900f4c8b08d75cc5c921d1c"
},
{
"name": "https://github.com/activepieces/activepieces/commit/afe852f60e39fcc6273d41e11f0765586b5a0e49",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/activepieces/activepieces/commit/afe852f60e39fcc6273d41e11f0765586b5a0e49"
},
{
"name": "https://github.com/activepieces/activepieces/releases/tag/0.83.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/activepieces/activepieces/releases/tag/0.83.0"
}
],
"source": {
"advisory": "GHSA-9723-fmff-mc24",
"discovery": "UNKNOWN"
},
"title": "Activepieces: Cross-tenant file download via missing JWT audience check on step-files signed URL"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-53536",
"datePublished": "2026-07-16T18:48:30.875Z",
"dateReserved": "2026-06-09T18:13:07.262Z",
"dateUpdated": "2026-07-18T03:06:51.360Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-53535 (GCVE-0-2026-53535)
Vulnerability from nvd – Published: 2026-07-16 18:52 – Updated: 2026-07-17 18:06
VLAI
EPSS
VEX
Title
Activepieces: Arbitrary file write in git-sync via path traversal and symlinks
Summary
Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the git-sync feature clones a user-configured Git repository into a temporary directory on the server and then writes flow, table, and connection state into it before pushing back, and two separate weaknesses allowed those writes to escape the intended workspace and land on arbitrary paths on the host filesystem: Git's symbolic-link handling was not disabled on the clone, so an attacker who controlled the remote repository could include symlinks that redirected the writes, and several user-supplied identifiers used to build on-disk paths (the repository slug and the externalId of tables, flows, and connections) were not validated against directory-traversal sequences such as ../. On a self-hosted Enterprise Edition deployment, a user authorized to configure or push to a git-sync repository (holding the WRITE_PROJECT_RELEASE permission) could cause the server to overwrite files anywhere the Activepieces process user can write, which depending on host layout can be leveraged for tampering, denial of service, or remote code execution. This issue is fixed in version 0.82.0.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-07-17 17:15 UTC
CWE
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/activepieces/activepieces/secu… | x_refsource_CONFIRM |
| https://github.com/activepieces/activepieces/pull/12711 | x_refsource_MISC |
| https://github.com/activepieces/activepieces/comm… | x_refsource_MISC |
| https://github.com/activepieces/activepieces/rele… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| activepieces | activepieces |
Affected:
< 0.82.0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-53535",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-17T17:15:49.485466Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-07-17T18:06:44.807Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "activepieces",
"vendor": "activepieces",
"versions": [
{
"status": "affected",
"version": "\u003c 0.82.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the git-sync feature clones a user-configured Git repository into a temporary directory on the server and then writes flow, table, and connection state into it before pushing back, and two separate weaknesses allowed those writes to escape the intended workspace and land on arbitrary paths on the host filesystem: Git\u0027s symbolic-link handling was not disabled on the clone, so an attacker who controlled the remote repository could include symlinks that redirected the writes, and several user-supplied identifiers used to build on-disk paths (the repository slug and the externalId of tables, flows, and connections) were not validated against directory-traversal sequences such as ../. On a self-hosted Enterprise Edition deployment, a user authorized to configure or push to a git-sync repository (holding the WRITE_PROJECT_RELEASE permission) could cause the server to overwrite files anywhere the Activepieces process user can write, which depending on host layout can be leveraged for tampering, denial of service, or remote code execution. This issue is fixed in version 0.82.0."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"privilegesRequired": "HIGH",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "HIGH"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-59",
"description": "CWE-59: Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-16T18:52:43.462Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/activepieces/activepieces/security/advisories/GHSA-qqcr-rg2x-97mm",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/activepieces/activepieces/security/advisories/GHSA-qqcr-rg2x-97mm"
},
{
"name": "https://github.com/activepieces/activepieces/pull/12711",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/activepieces/activepieces/pull/12711"
},
{
"name": "https://github.com/activepieces/activepieces/commit/01bd4ef76fc1ad1bf7adc10c39ece4f624da6bf5",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/activepieces/activepieces/commit/01bd4ef76fc1ad1bf7adc10c39ece4f624da6bf5"
},
{
"name": "https://github.com/activepieces/activepieces/releases/tag/0.82.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/activepieces/activepieces/releases/tag/0.82.0"
}
],
"source": {
"advisory": "GHSA-qqcr-rg2x-97mm",
"discovery": "UNKNOWN"
},
"title": "Activepieces: Arbitrary file write in git-sync via path traversal and symlinks"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-53535",
"datePublished": "2026-07-16T18:52:43.462Z",
"dateReserved": "2026-06-09T17:30:33.457Z",
"dateUpdated": "2026-07-17T18:06:44.807Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-73084 (GCVE-0-2026-73084)
Vulnerability from cvelistv5 – Published: 2026-08-11 16:35 – Updated: 2026-08-12 22:13
VLAI
EPSS
VEX
Title
Activepieces: Reflected Cross-Site Scripting in OAuth Redirect Endpoint
Summary
Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /api/redirect OAuth callback endpoint embeds the user-supplied code query parameter directly into an inline script block without proper escaping. A crafted request to /api/redirect with a malicious code value can break out of the script context and execute arbitrary JavaScript in the Activepieces origin when a logged-in user opens it. An unauthenticated attacker can access the victim's session tokens or make authenticated API calls on the victim's behalf. This issue is fixed in version 0.83.0.
Severity
6.1 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-12 22:07 UTC
CWE
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/activepieces/activepieces/secu… | x_refsource_CONFIRM |
| https://github.com/activepieces/activepieces/comm… | x_refsource_MISC |
| https://github.com/activepieces/activepieces/rele… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| activepieces | activepieces |
Affected:
< 0.83.0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-73084",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-12T22:07:51.635074Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-12T22:13:48.236Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "activepieces",
"vendor": "activepieces",
"versions": [
{
"status": "affected",
"version": "\u003c 0.83.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /api/redirect OAuth callback endpoint embeds the user-supplied code query parameter directly into an inline script block without proper escaping. A crafted request to /api/redirect with a malicious code value can break out of the script context and execute arbitrary JavaScript in the Activepieces origin when a logged-in user opens it. An unauthenticated attacker can access the victim\u0027s session tokens or make authenticated API calls on the victim\u0027s behalf. This issue is fixed in version 0.83.0."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-11T16:35:06.492Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/activepieces/activepieces/security/advisories/GHSA-hc39-cm5m-q8g7",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/activepieces/activepieces/security/advisories/GHSA-hc39-cm5m-q8g7"
},
{
"name": "https://github.com/activepieces/activepieces/commit/8be4c8d5e6a79ccbaa74815027432a3c8c311385",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/activepieces/activepieces/commit/8be4c8d5e6a79ccbaa74815027432a3c8c311385"
},
{
"name": "https://github.com/activepieces/activepieces/releases/tag/0.83.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/activepieces/activepieces/releases/tag/0.83.0"
}
],
"source": {
"advisory": "GHSA-hc39-cm5m-q8g7",
"discovery": "UNKNOWN"
},
"title": "Activepieces: Reflected Cross-Site Scripting in OAuth Redirect Endpoint"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-73084",
"datePublished": "2026-08-11T16:35:06.492Z",
"dateReserved": "2026-08-10T19:37:41.445Z",
"dateUpdated": "2026-08-12T22:13:48.236Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-73083 (GCVE-0-2026-73083)
Vulnerability from cvelistv5 – Published: 2026-08-11 16:33 – Updated: 2026-08-13 15:01
VLAI
EPSS
VEX
Title
Activepieces: V8 Isolate Sandbox Bypass via importFresh Module Loading
Summary
Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, in SANDBOX_CODE_ONLY mode, the engine loads the compiled user module with importFresh(), a wrapper around Node.js require(), before the V8 isolate is applied. Top-level module code can therefore call require('child_process'), access fs, and use other Node.js APIs in the host engine process outside the sandbox. An authenticated user who can create a Code step can read environment secrets including AP_ENCRYPTION_KEY and AP_JWT_SECRET, read or write files, and reach internal services. This issue is fixed in version 0.80.0.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-13 15:01 UTC
CWE
- CWE-693 - Protection Mechanism Failure
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://github.com/activepieces/activepieces/secu… | x_refsource_CONFIRM |
| https://github.com/activepieces/activepieces/rele… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| activepieces | activepieces |
Affected:
< 0.80.0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-73083",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-13T15:01:31.190281Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-13T15:01:34.037Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "activepieces",
"vendor": "activepieces",
"versions": [
{
"status": "affected",
"version": "\u003c 0.80.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, in SANDBOX_CODE_ONLY mode, the engine loads the compiled user module with importFresh(), a wrapper around Node.js require(), before the V8 isolate is applied. Top-level module code can therefore call require(\u0027child_process\u0027), access fs, and use other Node.js APIs in the host engine process outside the sandbox. An authenticated user who can create a Code step can read environment secrets including AP_ENCRYPTION_KEY and AP_JWT_SECRET, read or write files, and reach internal services. This issue is fixed in version 0.80.0."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 7.6,
"baseSeverity": "HIGH",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-693",
"description": "CWE-693: Protection Mechanism Failure",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-11T16:33:22.045Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/activepieces/activepieces/security/advisories/GHSA-gr3h-c2j7-r52g",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/activepieces/activepieces/security/advisories/GHSA-gr3h-c2j7-r52g"
},
{
"name": "https://github.com/activepieces/activepieces/releases/tag/0.80.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/activepieces/activepieces/releases/tag/0.80.0"
}
],
"source": {
"advisory": "GHSA-gr3h-c2j7-r52g",
"discovery": "UNKNOWN"
},
"title": "Activepieces: V8 Isolate Sandbox Bypass via importFresh Module Loading"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-73083",
"datePublished": "2026-08-11T16:33:22.045Z",
"dateReserved": "2026-08-10T19:37:41.445Z",
"dateUpdated": "2026-08-13T15:01:34.037Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-73082 (GCVE-0-2026-73082)
Vulnerability from cvelistv5 – Published: 2026-08-11 16:30 – Updated: 2026-08-11 17:53
VLAI
EPSS
VEX
Title
Activepieces: Server-side request forgery in MCP tool validation endpoint
Summary
Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the POST /api/v1/projects/:projectId/mcp-server/validate-agent-mcp-tool endpoint makes an outbound HTTP or SSE request to a user-supplied serverUrl without URL validation or SSRF protection. An authenticated user can cause the Activepieces server to connect to internal services, cloud metadata endpoints, or arbitrary external hosts and probe network reachability from the Activepieces host. This issue is fixed in version 0.82.0.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-11 17:53 UTC
CWE
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/activepieces/activepieces/secu… | x_refsource_CONFIRM |
| https://github.com/activepieces/activepieces/pull/12721 | x_refsource_MISC |
| https://github.com/activepieces/activepieces/comm… | x_refsource_MISC |
| https://github.com/activepieces/activepieces/rele… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| activepieces | activepieces |
Affected:
< 0.82.0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-73082",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-11T17:53:39.626409Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-11T17:53:53.473Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "activepieces",
"vendor": "activepieces",
"versions": [
{
"status": "affected",
"version": "\u003c 0.82.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the POST /api/v1/projects/:projectId/mcp-server/validate-agent-mcp-tool endpoint makes an outbound HTTP or SSE request to a user-supplied serverUrl without URL validation or SSRF protection. An authenticated user can cause the Activepieces server to connect to internal services, cloud metadata endpoints, or arbitrary external hosts and probe network reachability from the Activepieces host. This issue is fixed in version 0.82.0."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-918",
"description": "CWE-918: Server-Side Request Forgery (SSRF)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-11T16:30:02.590Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/activepieces/activepieces/security/advisories/GHSA-7qx9-q4xx-rh59",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/activepieces/activepieces/security/advisories/GHSA-7qx9-q4xx-rh59"
},
{
"name": "https://github.com/activepieces/activepieces/pull/12721",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/activepieces/activepieces/pull/12721"
},
{
"name": "https://github.com/activepieces/activepieces/commit/d385079cf4a9f35ddf61ba68ecda6ac8d64cf9e1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/activepieces/activepieces/commit/d385079cf4a9f35ddf61ba68ecda6ac8d64cf9e1"
},
{
"name": "https://github.com/activepieces/activepieces/releases/tag/0.82.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/activepieces/activepieces/releases/tag/0.82.0"
}
],
"source": {
"advisory": "GHSA-7qx9-q4xx-rh59",
"discovery": "UNKNOWN"
},
"title": "Activepieces: Server-side request forgery in MCP tool validation endpoint"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-73082",
"datePublished": "2026-08-11T16:30:02.590Z",
"dateReserved": "2026-08-10T19:37:41.445Z",
"dateUpdated": "2026-08-11T17:53:53.473Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-73081 (GCVE-0-2026-73081)
Vulnerability from cvelistv5 – Published: 2026-08-11 16:28 – Updated: 2026-08-12 14:40
VLAI
EPSS
VEX
Title
Activepieces: Remote Code Execution via Command Injection in Code Step Name
Summary
Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-compilation pipeline builds the on-disk path for a Code step from the step's name and passes that path to a shell-invoked build command. A step name containing shell metacharacters can break out of the intended build invocation and execute arbitrary commands during compilation before any code sandbox is created. An authenticated user with permission to create or edit a flow can execute commands as the worker process user, read and write the worker filesystem, exfiltrate environment secrets, and reach internal services available to the worker. This issue is fixed in version 0.80.0.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-12 14:40 UTC
CWE
- CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://github.com/activepieces/activepieces/secu… | x_refsource_CONFIRM |
| https://github.com/activepieces/activepieces/rele… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| activepieces | activepieces |
Affected:
< 0.80.0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-73081",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-12T14:40:37.545297Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-12T14:40:52.532Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "activepieces",
"vendor": "activepieces",
"versions": [
{
"status": "affected",
"version": "\u003c 0.80.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker\u0027s code-compilation pipeline builds the on-disk path for a Code step from the step\u0027s name and passes that path to a shell-invoked build command. A step name containing shell metacharacters can break out of the intended build invocation and execute arbitrary commands during compilation before any code sandbox is created. An authenticated user with permission to create or edit a flow can execute commands as the worker process user, read and write the worker filesystem, exfiltrate environment secrets, and reach internal services available to the worker. This issue is fixed in version 0.80.0."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "LOW",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-11T16:28:11.777Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/activepieces/activepieces/security/advisories/GHSA-3pfv-m69p-5fv5",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/activepieces/activepieces/security/advisories/GHSA-3pfv-m69p-5fv5"
},
{
"name": "https://github.com/activepieces/activepieces/releases/tag/0.80.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/activepieces/activepieces/releases/tag/0.80.0"
}
],
"source": {
"advisory": "GHSA-3pfv-m69p-5fv5",
"discovery": "UNKNOWN"
},
"title": "Activepieces: Remote Code Execution via Command Injection in Code Step Name"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-73081",
"datePublished": "2026-08-11T16:28:11.777Z",
"dateReserved": "2026-08-10T19:37:41.445Z",
"dateUpdated": "2026-08-12T14:40:52.532Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-48499 (GCVE-0-2026-48499)
Vulnerability from cvelistv5 – Published: 2026-07-30 17:10 – Updated: 2026-07-30 18:07
VLAI
EPSS
VEX
Title
Activepieces: Cross-tenant data exposure and code injection via the Code piece sandbox cache
Summary
Activepieces is an open source AI workflow automation platform. Prior to 0.84.0, an unsanitized path segment in the Code piece sandbox can let an authenticated flow author reach read-write cached flow and code files belonging to other tenants on the same worker, exposing embedded data and allowing modified code to execute on a victim tenant's next flow run. This issue is fixed in version 0.84.0.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-07-30 18:06 UTC
CWE
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/activepieces/activepieces/secu… | x_refsource_CONFIRM |
| https://github.com/activepieces/activepieces/comm… | x_refsource_MISC |
| https://github.com/activepieces/activepieces/rele… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| activepieces | activepieces |
Affected:
< 0.84.0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-48499",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-30T18:06:03.876322Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-07-30T18:07:34.332Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "activepieces",
"vendor": "activepieces",
"versions": [
{
"status": "affected",
"version": "\u003c 0.84.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Activepieces is an open source AI workflow automation platform. Prior to 0.84.0, an unsanitized path segment in the Code piece sandbox can let an authenticated flow author reach read-write cached flow and code files belonging to other tenants on the same worker, exposing embedded data and allowing modified code to execute on a victim tenant\u0027s next flow run. This issue is fixed in version 0.84.0."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-285",
"description": "CWE-285: Improper Authorization",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-668",
"description": "CWE-668: Exposure of Resource to Wrong Sphere",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-732",
"description": "CWE-732: Incorrect Permission Assignment for Critical Resource",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-30T17:10:28.347Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/activepieces/activepieces/security/advisories/GHSA-5h2x-g6m3-grmq",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/activepieces/activepieces/security/advisories/GHSA-5h2x-g6m3-grmq"
},
{
"name": "https://github.com/activepieces/activepieces/commit/9d8d328424bd32d295c5727af7550e1b57f9074d",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/activepieces/activepieces/commit/9d8d328424bd32d295c5727af7550e1b57f9074d"
},
{
"name": "https://github.com/activepieces/activepieces/releases/tag/0.84.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/activepieces/activepieces/releases/tag/0.84.0"
}
],
"source": {
"advisory": "GHSA-5h2x-g6m3-grmq",
"discovery": "UNKNOWN"
},
"title": "Activepieces: Cross-tenant data exposure and code injection via the Code piece sandbox cache"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-48499",
"datePublished": "2026-07-30T17:10:28.347Z",
"dateReserved": "2026-05-21T15:33:08.292Z",
"dateUpdated": "2026-07-30T18:07:34.332Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-53535 (GCVE-0-2026-53535)
Vulnerability from cvelistv5 – Published: 2026-07-16 18:52 – Updated: 2026-07-17 18:06
VLAI
EPSS
VEX
Title
Activepieces: Arbitrary file write in git-sync via path traversal and symlinks
Summary
Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the git-sync feature clones a user-configured Git repository into a temporary directory on the server and then writes flow, table, and connection state into it before pushing back, and two separate weaknesses allowed those writes to escape the intended workspace and land on arbitrary paths on the host filesystem: Git's symbolic-link handling was not disabled on the clone, so an attacker who controlled the remote repository could include symlinks that redirected the writes, and several user-supplied identifiers used to build on-disk paths (the repository slug and the externalId of tables, flows, and connections) were not validated against directory-traversal sequences such as ../. On a self-hosted Enterprise Edition deployment, a user authorized to configure or push to a git-sync repository (holding the WRITE_PROJECT_RELEASE permission) could cause the server to overwrite files anywhere the Activepieces process user can write, which depending on host layout can be leveraged for tampering, denial of service, or remote code execution. This issue is fixed in version 0.82.0.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-07-17 17:15 UTC
CWE
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/activepieces/activepieces/secu… | x_refsource_CONFIRM |
| https://github.com/activepieces/activepieces/pull/12711 | x_refsource_MISC |
| https://github.com/activepieces/activepieces/comm… | x_refsource_MISC |
| https://github.com/activepieces/activepieces/rele… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| activepieces | activepieces |
Affected:
< 0.82.0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-53535",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-17T17:15:49.485466Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-07-17T18:06:44.807Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "activepieces",
"vendor": "activepieces",
"versions": [
{
"status": "affected",
"version": "\u003c 0.82.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the git-sync feature clones a user-configured Git repository into a temporary directory on the server and then writes flow, table, and connection state into it before pushing back, and two separate weaknesses allowed those writes to escape the intended workspace and land on arbitrary paths on the host filesystem: Git\u0027s symbolic-link handling was not disabled on the clone, so an attacker who controlled the remote repository could include symlinks that redirected the writes, and several user-supplied identifiers used to build on-disk paths (the repository slug and the externalId of tables, flows, and connections) were not validated against directory-traversal sequences such as ../. On a self-hosted Enterprise Edition deployment, a user authorized to configure or push to a git-sync repository (holding the WRITE_PROJECT_RELEASE permission) could cause the server to overwrite files anywhere the Activepieces process user can write, which depending on host layout can be leveraged for tampering, denial of service, or remote code execution. This issue is fixed in version 0.82.0."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"privilegesRequired": "HIGH",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "HIGH"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-59",
"description": "CWE-59: Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-16T18:52:43.462Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/activepieces/activepieces/security/advisories/GHSA-qqcr-rg2x-97mm",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/activepieces/activepieces/security/advisories/GHSA-qqcr-rg2x-97mm"
},
{
"name": "https://github.com/activepieces/activepieces/pull/12711",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/activepieces/activepieces/pull/12711"
},
{
"name": "https://github.com/activepieces/activepieces/commit/01bd4ef76fc1ad1bf7adc10c39ece4f624da6bf5",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/activepieces/activepieces/commit/01bd4ef76fc1ad1bf7adc10c39ece4f624da6bf5"
},
{
"name": "https://github.com/activepieces/activepieces/releases/tag/0.82.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/activepieces/activepieces/releases/tag/0.82.0"
}
],
"source": {
"advisory": "GHSA-qqcr-rg2x-97mm",
"discovery": "UNKNOWN"
},
"title": "Activepieces: Arbitrary file write in git-sync via path traversal and symlinks"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-53535",
"datePublished": "2026-07-16T18:52:43.462Z",
"dateReserved": "2026-06-09T17:30:33.457Z",
"dateUpdated": "2026-07-17T18:06:44.807Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-53536 (GCVE-0-2026-53536)
Vulnerability from cvelistv5 – Published: 2026-07-16 18:48 – Updated: 2026-07-18 03:06
VLAI
EPSS
VEX
Title
Activepieces: Cross-tenant file download via missing JWT audience check on step-files signed URL
Summary
Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /v1/step-files/signed download endpoint verified the supplied JWT against the shared signing secret but did not check the token's audience, and combined with a missing null-check on the decoded fileId, this allowed any caller holding any valid Activepieces JWT (including a freshly created user's own access token) to receive a step-file belonging to another tenant. The file returned was whatever PostgreSQL happened to scan first for type = FLOW_STEP_FILE, varying over time as the database changed, so an authenticated user could obtain step-file attachments belonging to other tenants on the same instance; the attacker could not target a specific victim or file, and the access was read-only with no integrity or availability impact. This issue is fixed in version 0.83.0.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-07-18 03:06 UTC
CWE
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/activepieces/activepieces/secu… | x_refsource_CONFIRM |
| https://github.com/activepieces/activepieces/comm… | x_refsource_MISC |
| https://github.com/activepieces/activepieces/comm… | x_refsource_MISC |
| https://github.com/activepieces/activepieces/rele… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| activepieces | activepieces |
Affected:
< 0.83.0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-53536",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-18T03:06:39.776622Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-07-18T03:06:51.360Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "activepieces",
"vendor": "activepieces",
"versions": [
{
"status": "affected",
"version": "\u003c 0.83.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /v1/step-files/signed download endpoint verified the supplied JWT against the shared signing secret but did not check the token\u0027s audience, and combined with a missing null-check on the decoded fileId, this allowed any caller holding any valid Activepieces JWT (including a freshly created user\u0027s own access token) to receive a step-file belonging to another tenant. The file returned was whatever PostgreSQL happened to scan first for type = FLOW_STEP_FILE, varying over time as the database changed, so an authenticated user could obtain step-file attachments belonging to other tenants on the same instance; the attacker could not target a specific victim or file, and the access was read-only with no integrity or availability impact. This issue is fixed in version 0.83.0."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-345",
"description": "CWE-345: Insufficient Verification of Data Authenticity",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "CWE-639: Authorization Bypass Through User-Controlled Key",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-16T18:48:30.875Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/activepieces/activepieces/security/advisories/GHSA-9723-fmff-mc24",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/activepieces/activepieces/security/advisories/GHSA-9723-fmff-mc24"
},
{
"name": "https://github.com/activepieces/activepieces/commit/2cb6148010a6c2a22900f4c8b08d75cc5c921d1c",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/activepieces/activepieces/commit/2cb6148010a6c2a22900f4c8b08d75cc5c921d1c"
},
{
"name": "https://github.com/activepieces/activepieces/commit/afe852f60e39fcc6273d41e11f0765586b5a0e49",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/activepieces/activepieces/commit/afe852f60e39fcc6273d41e11f0765586b5a0e49"
},
{
"name": "https://github.com/activepieces/activepieces/releases/tag/0.83.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/activepieces/activepieces/releases/tag/0.83.0"
}
],
"source": {
"advisory": "GHSA-9723-fmff-mc24",
"discovery": "UNKNOWN"
},
"title": "Activepieces: Cross-tenant file download via missing JWT audience check on step-files signed URL"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-53536",
"datePublished": "2026-07-16T18:48:30.875Z",
"dateReserved": "2026-06-09T18:13:07.262Z",
"dateUpdated": "2026-07-18T03:06:51.360Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}