[ Vendor · 1 CVEs ]
kestra-io
CVEs affecting kestra-io published in the last 30 days, plus any kestra-io CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-49869 | 26 Jun 2026 | CVSS 10.0 | Kestra OSS OS Command InjectionKestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, AuthenticationFilter in Kestra OSS uses… | Exploited |