CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
1 advisories matched
2026-06-26
Kestra Orchestration Platform Authentication Bypass and Remote Code Execution (RCE) Vulnerability (CVE-2026-49869)
[Affected Scope] Kestra open-source versions prior to 1.0.45 and 1.3.21
[Impact] Unauthenticated remote attackers can bypass authentication filters to create and execute arbitrary workflows, leading to Remote Code Execution (RCE) as root inside the worker container
[Mitigation] Immediately upgrade Kestra to version 1.0.45, 1.3.21, or higher