https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T13:03:11.506235+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-351203 EUVD-2026-351203 2026-10-05T13:03:11.551153+00:00 EUVD-2026-351203 https://cve.radiocsirt.org/vuln/fkie_cve-2026-73082 fkie_cve-2026-73082 2026-10-05T13:03:11.551207+00:00

Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the POST /api/v1/projects/:projectId/mcp-server/validate-agent-mcp-tool endpoint makes an outbound HTTP or SSE request to a user-supplied serverUrl without URL validation or SSRF protection. An authenticated user can cause the Activepieces server to connect to internal services, cloud metadata endpoints, or arbitrary external hosts and probe network reachability from the Activepieces host. This issue is fixed in version 0.82.0.