Activepieces vulnerabilities
We track 3 vulnerabilities in Activepieces products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 11, 2026.
Latest Activepieces vulnerabilities
- 7.6 High severity
activepieces: Protection Mechanism Failure
Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, in SANDBOX_CODE_ONLY mode, the engine loads the compiled user module with importFresh(), a wrapper around Node.js require(), before the V8 isolate is applied. Top-level module cod
- 8.7 High severity
activepieces: Improper Neutralization of Special Elements used in an OS Command
Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-compilation pipeline builds the on-disk path for a Code step from the step's name and passes that path to a shell-invoked build command. A step name containing s
- 9.3 Critical severity
activepieces: Exposure of Sensitive Information to an Unauthorized Actor
Activepieces is an open source AI workflow automation platform. Prior to 0.84.0, an unsanitized path segment in the Code piece sandbox can let an authenticated flow author reach read-write cached flow and code files belonging to other tenants on the same worke