activepieces vulnerabilities
7 published CVEs name activepieces among the affected products.
- 7Published CVEs7 of them scored
- 7Last 12 monthspublished in the last year
- 1Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-73084
Activepieces: Reflected Cross-Site Scripting in OAuth Redirect Endpoint
activepieces · activepieces
Medium6.1 - CVE-2026-73083
Activepieces: V8 Isolate Sandbox Bypass via importFresh Module Loading
activepieces · activepieces
High7.6 - CVE-2026-73082
Activepieces: Server-side request forgery in MCP tool validation endpoint
activepieces · activepieces
Medium5.3 - CVE-2026-73081
Activepieces: Remote Code Execution via Command Injection in Code Step Name
activepieces · activepieces
High8.7 - CVE-2026-48499
Activepieces: Cross-tenant data exposure and code injection via the Code piece sandbox cache
activepieces · activepieces
Critical9.3 - CVE-2026-53535
Activepieces: Arbitrary file write in git-sync via path traversal and symlinks
activepieces · activepieces
Medium5.9 - CVE-2026-53536
Activepieces: Cross-tenant file download via missing JWT audience check on step-files signed URL
activepieces · activepieces
Medium5.3