VulnSocial

CVE-2026-48499Patch

LOWCVSS 9.3 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Activepieces is an open source AI workflow automation platform. Prior to 0.84.0, an unsanitized path segment in the Code piece sandbox can let an authenticated flow author reach read-write cached flow and code files belonging to other tenants on the same worker, exposing embedded data and allowing modified code to execute on a victim tenant's next flow run. This issue is fixed in version 0.84.0.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-200CWE-285CWE-668CWE-732

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-07-30: 1Patch / Workaround · 2026-07-30: 107-30
Signal classification1 categories
Patch
1100.0%
Referenced assets2 URLs
Full discourse1 post
  • MalwareObserver@MalwareObserver
    Patch

    🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-48499](https://github.com/activepieces/activepieces/commit/9d8d328424bd32d295c5727af755... https://github.com/activepieces/activepieces/commit/9d8d328424bd32d295c5727af7550e1b57f9074d #PatchManagement #Vulnerability #CVE

    Post summary

    A GitHub commit is linked, indicating a patch for CVE‑2026‑48499, but no exploit, vulnerability details, or activity reports are included.

    0001048
    17 followersView on X

Explore more

Back to dashboard