{"id":"CVE-2026-73083","title":"Activepieces is an open source AI workflow automation platform","summary":"Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, in SANDBOX_CODE_ONLY mode, the engine loads the compiled user module with importFresh(), a wrapper around Node.js require(), before the V8 isolate is applie…","severity":"none","cwe":["CWE-693"],"published":"2026-08-11","updated":"2026-09-09","sourceUpdated":"2026-09-09T20:46:02.457","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-73083","references":[{"url":"https://github.com/activepieces/activepieces/releases/tag/0.80.0","label":"security-advisories@github.com"},{"url":"https://github.com/activepieces/activepieces/security/advisories/GHSA-gr3h-c2j7-r52g","label":"security-advisories@github.com"}],"tags":["nvd"],"epss":0.00156,"epssPercentile":0.0519,"ingestedAt":"2026-09-09T21:22:45.528Z","slug":"CVE-2026-73083","body":"## Overview\n\nActivepieces is an open source AI workflow automation platform. Prior to 0.80.0, in SANDBOX_CODE_ONLY mode, the engine loads the compiled user module with importFresh(), a wrapper around Node.js require(), before the V8 isolate is applied. Top-level module code can therefore call require('child_process'), access fs, and use other Node.js APIs in the host engine process outside the sandbox. An authenticated user who can create a Code step can read environment secrets including AP_ENCRYPTION_KEY and AP_JWT_SECRET, read or write files, and reach internal services. This issue is fixed in version 0.80.0.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}