Activepieces

7 CVEs across 1 Activepieces products. Browse Activepieces vulnerabilities, severities, and proof-of-concept exploits.

Activepieces products with known CVEs

ProductCVEs
Activepieces7
Activepieces CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-73084Medium6.12026-08-11Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /api/redirect OAuth callback endpoint embeds the user-supplied code query…
CVE-2026-730832026-08-11Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, in SANDBOX_CODE_ONLY mode, the engine loads the compiled user module with impo…
CVE-2026-730822026-08-11Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the POST /api/v1/projects/:projectId/mcp-server/validate-agent-mcp-tool endpoi…
CVE-2026-730812026-08-11Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-compilation pipeline builds the on-disk path for a Code step…
CVE-2026-484992026-07-30Activepieces is an open source AI workflow automation platform. Prior to 0.84.0, an unsanitized path segment in the Code piece sandbox can let an authenticated…
CVE-2026-535362026-07-16Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /v1/step-files/signed download endpoint verified the supplied JWT against…
CVE-2026-535352026-07-16Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the git-sync feature clones a user-configured Git repository into a temporary…