EUVD-2026-38199
GHSA-fhpv-gggj-q6pv
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable SSRF requiring authenticated (PR:L) access; scope change (S:C) applies as internal systems outside the vulnerable component can be reached.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
3DescriptionCVE.org
A vulnerability was detected in activepieces up to 0.83.0. This vulnerability affects the function handleUrlFile in the library packages/server/engine/src/lib/variables/processors/file.ts of the component File URL Handler. The manipulation results in server-side request forgery. The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
AnalysisAI
Server-side request forgery in Activepieces through version 0.83.0 enables authenticated remote attackers to coerce the server into issuing arbitrary HTTP requests to attacker-controlled destinations via the handleUrlFile function in the File URL Handler component. The vulnerability spans the entire documented release history from 0.1 to 0.83.0, and a public exploit write-up is available on GitHub, materially lowering the exploitation barrier. The vendor did not respond to responsible disclosure, meaning no patch has been released at time of analysis and no official remediation guidance exists.
Technical ContextAI
Activepieces is an open-source workflow automation platform (analogous to Zapier or n8n) in which users compose multi-step automation flows. The vulnerable code resides in packages/server/engine/src/lib/variables/processors/file.ts, specifically in the handleUrlFile function, which is invoked when a workflow step receives a file property specified as a URL. CWE-918 (Server-Side Request Forgery) arises here because the server fetches the caller-supplied URL without adequate validation of the destination host or IP range, allowing an attacker to redirect those fetches toward internal network endpoints - including RFC-1918 private addresses, localhost services, and cloud instance metadata endpoints such as the AWS/GCP/Azure IMDS at 169.254.169.254. The CPE string cpe:2.3:a:n/a:activepieces:*:*:*:*:*:*:*:* reflects that the vendor namespace is unregistered in NVD, covering all versions. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N) confirms this is network-reachable with low attack complexity and no specialized attack prerequisites beyond authenticated access.
RemediationAI
No vendor-released patch has been identified at time of analysis; the vendor did not respond to responsible disclosure and no fixed version has been confirmed. Immediate compensating controls for self-hosted deployments include configuring host-level or network-level egress filtering to block outbound HTTP/S connections from the Activepieces server process to RFC-1918 ranges (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16), the loopback address (127.0.0.1/::1), and cloud metadata endpoints (169.254.169.254) - noting that overly broad blocking may disrupt legitimate workflow integrations that target internal services. Deploying an explicit egress proxy with an allowlist of approved external destinations is a higher-fidelity control with the trade-off of requiring ongoing maintenance of the allowed list. Restricting Activepieces account creation and auditing existing low-privilege accounts reduces the authenticated attack surface. Monitor the Activepieces GitHub release page for a patched version. The public exploit write-up is available at https://github.com/dxz0069/softwareoverflow/blob/main/activepieces_file_property_url_ssrf_vulndb.md and should be reviewed to understand the precise request structure being exploited.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today