Activepieces, an open‑source AI workflow automation platform, loads user‑supplied modules with importFresh() before the V8 isolate sandbox is enforced in SANDBOX_CODE_ONLY mode. The wrapper around Node.js require() therefore allows top‑level module code to call require('child_process'), access the file system and use other native Node.js APIs in the host process. Thus an authenticated user who can create a Code step can execute arbitrary commands, read or write files, and expose internal credentials.

All Activepieces releases before v0.80.0 that operate in SANDBOX_CODE_ONLY mode are affected. The vulnerability is present in every version up to, but not including, 0.80.0.

The CVSS score of 7.6 classifies the issue as high severity. The EPSS score of less than 1 % indicates a low current exploitation probability, and the vulnerability is not listed in CISA’s KEV catalog. Attackers would need an authenticated account with permission to create Code steps; once enabled, the user could run arbitrary Node.js code and access host secrets and internal services.