Cross-tenant sandbox cache path traversal in Activepieces Code piece (CVE-2026-48499)

An unsanitized path segment in the Activepieces Code piece sandbox allows an authenticated flow author to access cached flow and code files belonging to other tenants sharing the same worker node. Because the cache is mounted read-write, an attacker can also modify another tenant's cached code or flow JSON, causing that modified code to execute in the victim tenant's worker context on the next flow run. Cached flow JSON may contain plaintext secrets embedded directly in step inputs, exposing credentials and business logic. Affected versions: - <= 0.83 We recommend updating to: 0.84.0. CVSS 9.3 · our assessment: act_now Reference: https://github.com/activepieces/activepieces/security/advisories/GHSA-5h2x-g6m3-grmq Details: https://vuln.today/cve/CVE-2026-48499