8x8 · Report #3858504
connect.8x8.com: Automation Builder - Input Validation Issue in Workflow Step Outputs
Validstatus
highseverity
$1,337bounty
36upvotes
2 Sept 2026disclosed
Summary
@kyotozzx reported an input validation issue in the 8x8 Connect Automation Builder's API where workflow step output field names were not validated against reserved context variable names. The issue was quickly addressed by implementing validation to reject reserved field names at workflow creation.
We thank @kyotozzx for submitting this report to us.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.