Kestra OSS OS Command Injection Vulnerability
Kestra OSS contains an OS command injection vulnerability that could allow an unauthenticated remote attacker to create and execute arbitrary workflows without credentials.
Read at CISA Known Exploited Vulnerabilities catalog
- Vendor
- Kestra
- Product
- Kestra OSS
- CISA KEV
- listed
- Exploitation
- observed in the wild
- Fix
- available
Why it ranks 51 (Critical)
- CISA KEV listed
- Covered by 2 independent sources
- Fix available
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- CISA Known Exploited Vulnerabilities catalog (nvd.nist.gov)
- CVE-2026-49869 on this site · NVD · CVE.org · Vulnpedia · KEV
Related coverage
Other items that share a CVE or were clustered with this one.