Activepieces, an open‑source AI workflow automation platform, had a flaw in its worker code‑compilation pipeline. Prior to version 0.80.0, the pipeline constructed an on‑disk path for a Code step from the step’s name and handed that path to a shell‑invoked build command. A step name that included shell metacharacters could escape the intended build context and run arbitrary commands during compilation. This allows an authenticated user who can create or edit a flow to execute commands as the worker user, read and write the worker filesystem, exfiltrate secrets, and reach internal services.

The vulnerability impacts the Activepieces platform, specifically all releases before 0.80.0. Users of the standard installation must check the worker component that performs code compilation. Version 0.80.0 and later contain the fix.

The CVSS score is 8.7, indicating high severity. The EPSS score is less than 1 %, suggesting a very low exploitation likelihood, and the vulnerability is not listed in the CISA KEV catalog. Attackers need only authenticated access with flow‑creation rights, a relatively common privilege in an organization. When satisfied, an attacker can inject a malicious step name to trigger arbitrary shell commands during the compilation phase, prior to the sandbox, giving them full control over the worker process.