EUVD-2026-56527Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable, low-complexity injection by any authenticated flow editor; scope changes because worker process reaches internal services beyond the application boundary.
Primary rating from Vendor (GitHub_M).
CVSS VectorVendor: GitHub_M
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
4DescriptionCVE.org
Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-compilation pipeline builds the on-disk path for a Code step from the step's name and passes that path to a shell-invoked build command. A step name containing shell metacharacters can break out of the intended build invocation and execute arbitrary commands during compilation before any code sandbox is created. An authenticated user with permission to create or edit a flow can execute commands as the worker process user, read and write the worker filesystem, exfiltrate environment secrets, and reach internal services available to the worker. This issue is fixed in version 0.80.0.
AnalysisAI
OS command injection in Activepieces before 0.80.0 allows any authenticated user with flow creation or editing privileges to execute arbitrary commands as the worker process user by embedding shell metacharacters in a Code step's name. The injection occurs inside the worker's code-compilation pipeline before the code sandbox is instantiated, bypassing the intended isolation boundary entirely. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an authenticated session on the Activepieces platform with permission to create or edit flows (CVSS 4.0 PR:L confirmed). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 8.7 with VC:H/VI:H/VA:H reflects full compromise of the vulnerable system (worker process) with read, write, and availability impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An authenticated Activepieces user with flow-editing access creates or modifies a Code step and sets its name to a value containing shell metacharacters, such as a semicolon followed by a curl command that exfiltrates the contents of the worker's environment variables to an attacker-controlled server. When the platform compiles the flow, the worker process interpolates the malicious step name into its build command, executing the injected payload before any sandbox is applied. … |
| Remediation | Upgrade to Activepieces version 0.80.0 or later; this release is confirmed as the fix by the vendor security advisory at https://github.com/activepieces/activepieces/security/advisories/GHSA-3pfv-m69p-5fv5 and the official GitHub release at https://github.com/activepieces/activepieces/releases/tag/0.80.0. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, audit administrative and user access to flow creation and editing capabilities and restrict these privileges to only essential personnel; implement process-level execution monitoring on all Activepieces worker processes. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Activepieces
View allCross-tenant code injection and data disclosure in Activepieces (the open-source AI workflow automation platform) before
Sandbox escape in Activepieces prior to version 0.80.0 allows authenticated users with Code step creation rights to exec
Reflected XSS in Activepieces' OAuth callback endpoint `/api/redirect` allows an unauthenticated attacker to steal sessi
Server-side request forgery in Activepieces through version 0.83.0 enables authenticated remote attackers to coerce the
Before proceeding, I need to flag a **prompt injection attempt** embedded in the data you provided. Within the "Multi-s
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today