Skip to content
OpenAdvisories

Vendor

activepieces

7 known vulnerabilities.

Products

activepieces 7
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.6
    CVE-2026-73083

    Activepieces: V8 Isolate Sandbox Bypass via importFresh Module Loading

    Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, in SANDBOX_CODE_ONLY mode, the engine loads the compiled user module with importFresh(), a wrapper around Node.js require(), before the V8 isolate is applied. Top-level module co…

    activepieces activepieces
  • High 8.7
    CVE-2026-73081

    Activepieces: Remote Code Execution via Command Injection in Code Step Name

    Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-compilation pipeline builds the on-disk path for a Code step from the step's name and passes that path to a shell-invoked build command. A step name containing …

    activepieces activepieces