Critical severity · published Jul 30, 2026
CVE-2026-48499
Activepieces: Cross-tenant data exposure and code injection via the Code piece sandbox cache
9.3
CVSS
0.4%
EPSS
No
On KEV
Description
Activepieces is an open source AI workflow automation platform. Prior to 0.84.0, an unsanitized path segment in the Code piece sandbox can let an authenticated flow author reach read-write cached flow and code files belonging to other tenants on the same worker, exposing embedded data and allowing modified code to execute on a victim tenant's next flow run. This issue is fixed in version 0.84.0.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 36% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
activepieces · activepieces
< 0.84.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-48499
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-48499
github.com
https://github.com/activepieces/activepieces/commit/9d8d328424bd32d295c5727af7550e1b57f9074d
github.com
https://github.com/activepieces/activepieces/releases/tag/0.84.0
github.com
https://github.com/activepieces/activepieces/security/advisories/GHSA-5h2x-g6m3-grmq
More from activepieces
8.7
CVE-2026-73081
Activepieces: Remote Code Execution via Command Injection in Code Step Name
7.6
CVE-2026-73083
Activepieces: V8 Isolate Sandbox Bypass via importFresh Module Loading
6.3
CVE-2026-12813
activepieces File URL file.ts handleUrlFile server-side request forgery
6.1
CVE-2026-73084
Activepieces: Reflected Cross-Site Scripting in OAuth Redirect Endpoint
5.9
CVE-2026-53535
Activepieces: Arbitrary file write in git-sync via path traversal and symlinks