CVE-2026-73082
Received Received - Intake

Server-Side Request Forgery in Activepieces Prior to 0.82.0

Publication date: 2026-08-11

Last updated on: 2026-08-11

Assigner: GitHub, Inc.

Description
Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the POST /api/v1/projects/:projectId/mcp-server/validate-agent-mcp-tool endpoint makes an outbound HTTP or SSE request to a user-supplied serverUrl without URL validation or SSRF protection. An authenticated user can cause the Activepieces server to connect to internal services, cloud metadata endpoints, or arbitrary external hosts and probe network reachability from the Activepieces host. This issue is fixed in version 0.82.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-11
Last Modified
2026-08-11
Generated
2026-08-11
AI Q&A
2026-08-11
EPSS Evaluated
N/A
NVD
CVE-2026-73082
EUVD
EUVD-2026-56534

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
activepieces activepieces to 0.82.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-200 The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-73082 is a Server-Side Request Forgery (SSRF) vulnerability in Activepieces versions prior to 0.82.0. It exists in the POST /api/v1/projects/:projectId/mcp-server/validate-agent-mcp-tool endpoint, which allows authenticated users to make outbound HTTP or SSE requests to arbitrary URLs without proper validation or SSRF protection. This could enable attackers to probe internal network services, access cloud metadata endpoints, or interact with hosts not publicly accessible.

Detection Guidance

To detect this SSRF vulnerability, monitor outbound HTTP/SSE requests from your Activepieces server, especially to private, loopback, or cloud metadata endpoints. Check logs for requests to URLs like 127.0.0.1, 169.254.0.0/16, or 10.0.0.0/8. Use network monitoring tools like tcpdump or Wireshark to capture unexpected outbound connections from the Activepieces process.

Impact Analysis

An attacker could use this vulnerability to probe internal network services, access cloud metadata endpoints, or interact with restricted hosts from the Activepieces server. This may lead to unauthorized network reconnaissance, potential data leakage, or exploitation of internal services. The impact includes information disclosure and network probing from the Activepieces host.

Compliance Impact

This vulnerability could lead to unauthorized access to internal systems or data, potentially violating compliance requirements under GDPR (data protection) or HIPAA (health information security). Unauthorized network probing or data exposure may result in regulatory penalties or breaches of confidentiality obligations.

Mitigation Strategies

Immediately upgrade Activepieces to version 0.82.0 or later. If upgrading is not possible, block the vulnerable endpoint POST /api/v1/projects/:projectId/mcp-server/validate-agent-mcp-tool at your reverse proxy. Configure the AP_SSRF_ALLOW_LIST environment variable to include trusted internal IPs if needed.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-73082. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart