Vulnerability · Published Aug 11, 2026 · Assigned by GitHub_M

CVE-2026-73083Activepieces: V8 Isolate Sandbox Bypass via importFresh Module Loading

High 7.6

In plain English

A high-severity security flaw in activepieces from activepieces. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 17% of all known vulnerabilities).

Severity (CVSS 4.0)7.6High

Exploit odds (30 days)0.3%top 83.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, in SANDBOX_CODE_ONLY mode, the engine loads the compiled user module with importFresh(), a wrapper around Node.js require(), before the V8 isolate is applied. Top-level module code can therefore call require('child_process'), access fs, and use other Node.js APIs in the host engine process outside the sandbox. An authenticated user who can create a Code step can read environment secrets including AP_ENCRYPTION_KEY and AP_JWT_SECRET, read or write files, and reach internal services. This issue is fixed in version 0.80.0.

Affected products (as reported)

Vendor	Product	Versions
activepieces	activepieces	< 0.80.0

Weakness: CWE-693 · Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N

References

https://github.com/activepieces/activepieces/security/advisories/GHSA-gr3h-c2j7-r52g x_refsource_CONFIRM
https://github.com/activepieces/activepieces/releases/tag/0.80.0 x_refsource_MISC