TI-2026-35860 CVE-2026-48499
Activepieces: Cross-tenant data exposure and code injection via the Code piece sandbox cache
Priority MEDIUM 42
Activepieces is an open source AI workflow automation platform.
activepieces
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
activepieces records in CISA KEVNo activepieces vulnerabilities are listed in CISA KEV.
Records
7 records
TI-2026-51288 CVE-2026-73081
Activepieces: Remote Code Execution via Command Injection in Code Step Name
Priority MEDIUM 40
Activepieces is an open source AI workflow automation platform.
Priority LOW 35
Activepieces is an open source AI workflow automation platform.
TI-2026-38608 CVE-2026-53535
Activepieces: Arbitrary file write in git-sync via path traversal and symlinks
Priority LOW 28
Activepieces is an open source AI workflow automation platform.
Priority LOW 27
Activepieces is an open source AI workflow automation platform.
TI-2026-51289 CVE-2026-73082
Activepieces: Server-side request forgery in MCP tool validation endpoint
Priority LOW 24
Activepieces is an open source AI workflow automation platform.
TI-2026-38609 CVE-2026-53536
Activepieces: Cross-tenant file download via missing JWT audience check on step-files signed URL
Priority LOW 24
Activepieces is an open source AI workflow automation platform.