---
id: CVE-2026-73083
title: Activepieces is an open source AI workflow automation platform
summary: >-
  Activepieces is an open source AI workflow automation platform. Prior to
  0.80.0, in SANDBOX_CODE_ONLY mode, the engine loads the compiled user module
  with importFresh(), a wrapper around Node.js require(), before the V8 isolate
  is applie…
severity: none
cwe:
  - CWE-693
published: '2026-08-11'
updated: '2026-09-09'
sourceUpdated: '2026-09-09T20:46:02.457'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-73083'
references:
  - url: 'https://github.com/activepieces/activepieces/releases/tag/0.80.0'
    label: security-advisories@github.com
  - url: >-
      https://github.com/activepieces/activepieces/security/advisories/GHSA-gr3h-c2j7-r52g
    label: security-advisories@github.com
tags:
  - nvd
epss: 0.00254
epssPercentile: 0.15049
ingestedAt: '2026-09-09T21:22:45.528Z'
---

## Overview

Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, in SANDBOX_CODE_ONLY mode, the engine loads the compiled user module with importFresh(), a wrapper around Node.js require(), before the V8 isolate is applied. Top-level module code can therefore call require('child_process'), access fs, and use other Node.js APIs in the host engine process outside the sandbox. An authenticated user who can create a Code step can read environment secrets including AP_ENCRYPTION_KEY and AP_JWT_SECRET, read or write files, and reach internal services. This issue is fixed in version 0.80.0.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.