---
title: Zapier Patched a Five-Flaw Chain That Could Have Hijacked Any Logged-In Account
description: Token Security found five chained flaws in Zapier that could allow account takeover. Zapier patched quickly and says it saw no evidence of exploitation.
canonical_url: https://codekeeper.co/ticker/zapier-vulnerabilities-account-takeover-risks
---

# Zapier Patched a Five-Flaw Chain That Could Have Hijacked Any Logged-In Account

Token Security found five chained flaws in Zapier that could allow account takeover. Zapier patched quickly and says it saw no evidence of exploitation.

![Content Team](https://codekeeper.co/hubfs/_sized/Codekeeper_21_beeldmerkL-800.png)

By Content Team May 29, 2026

Share [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fzapier-vulnerabilities-account-takeover-risks%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fzapier-vulnerabilities-account-takeover-risks%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fzapier-vulnerabilities-account-takeover-risks%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fzapier-vulnerabilities-account-takeover-risks%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fzapier-vulnerabilities-account-takeover-risks%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fzapier-vulnerabilities-account-takeover-risks%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

ON THIS PAGE

### Want more insights like this?

Subscribe to our newsletter to get the latest software protection strategies delivered to your inbox.

By submitting your email, you consent to Codekeeper contacting you and agree to our [privacy policy](https://codekeeper.co/privacy-policy) .

Security firm Token Security discovered five chained vulnerabilities in Zapier — a chain it calls Zapocalypse — that together could have let an attacker act as any logged-in user, starting with nothing more than a free account. The path ran from Code by Zapier's Python sandbox through AWS credentials that had been scrubbed from the environment but left sitting in Lambda's memory, into an Amazon ECR registry holding 1,111 private repositories. One image's build metadata carried an npm publish token — unscoped, write-enabled, and flagged to bypass two-factor authentication. That token could publish zapier-design-system, which loads in every authenticated session on zapier.com, so a bad actor could have created and rewritten automations as the user across Zapier's 8,000+ integrations. Connected services' OAuth tokens and API keys stay server-side, so those weren't directly exposed. Yair Balilti of Token Security reported the chain on February 12. Zapier triaged it in four days, revoked the token, confirmed remediation by March 5, and paid its $3,000 maximum bounty — while committing to review that cap. Zapier says it has no evidence of exploitation beyond the research itself. **Source:** [CyberScoop](https://cyberscoop.com/zapier-bug-chain-account-takeover-patched/)

Share this article [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fzapier-vulnerabilities-account-takeover-risks%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fzapier-vulnerabilities-account-takeover-risks%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fzapier-vulnerabilities-account-takeover-risks%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fzapier-vulnerabilities-account-takeover-risks%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fzapier-vulnerabilities-account-takeover-risks%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fzapier-vulnerabilities-account-takeover-risks%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

![blog_book_a_demo_cta_3x](https://codekeeper.co/hubfs/_sized/Codekeeper%202025/blog_book_a_demo_cta_3x-768x512.webp)

Have questions about protecting your software?

Our escrow experts are standing by to help.

[Book a free demo](https://codekeeper.co/book-a-demo)

YOU MAY ALSO LIKE

[Settra Joins Qilin in Exploiting Palo Alto VPN Flaw Patched in May Oct 12, 2026](https://codekeeper.co/ticker/ransomware-exploit-palo-alto-vpn-vulnerability)

[CrowdSec Source Code Stolen in TanStack Supply Chain Attack Sep 26, 2026](https://codekeeper.co/ticker/crowdsec-supply-chain-breach-github-repositories)

[Data breaches Florida Health Department Offers Credit Monitoring After Major Data Breach Aug 24, 2026](https://codekeeper.co/ticker/florida-health-department-data-breach-alert)

[Ransomware Gunra Ransomware Gang Exploits Fortinet Flaws and Bypasses MFA in Global Attacks Aug 14, 2026](https://codekeeper.co/ticker/gunra-ransomware-threatens-global-infrastructure)