Lucene search
+L

2 matches found

Cvelist
Cvelist
•added 2026/08/11 4:28 p.m.•37 views

CVE-2026-73081 Activepieces: Remote Code Execution via Command Injection in Code Step Name

Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-compilation pipeline builds the on-disk path for a Code step from the step's name and passes that path to a shell-invoked build command. A step name containing shell metacharacters can break out of...

8.7CVSS0.00531EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/11 4:28 p.m.•22 views

CVE-2026-73081 Activepieces: Remote Code Execution via Command Injection in Code Step Name

Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-compilation pipeline builds the on-disk path for a Code step from the step's name and passes that path to a shell-invoked build command. A step name containing shell metacharacters can break out of...

8.7CVSS5.8AI score
SaveExploits0References4
Rows per page
Query Builder