RCE in Activepieces
CVE-2026-73081
Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-compilation pipeline builds the on-disk path for a Code step from the step's name and passes that path to a shell-invoked build command. A s…
Vulnerability class: Command Injection (OS Command Injection)
Affected products
- Activepieces — versions < 0.80.0
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)