kestra-io Latest Vulnerabilities

Latest vulnerabilities published by kestra-io

JSON RSS CSV 🔔 Create Alert Trigger

26 June 2026

Unauthenticated Remote Code Execution in Kestra Orchestration Platform
CVE-2026-49869
Kestra-ioKestra10CRITICAL
Path Traversal Vulnerability in Kestra Open-Source Orchestration Platform
CVE-2026-45807
Kestra-ioKestra7.7HIGH
Path Traversal Vulnerability in Kestra by Kestra.io
CVE-2026-49984
Kestra-ioKestra7.7HIGH
Authentication Bypass in Kestra Orchestration Platform by Kestra
CVE-2026-53576
Kestra-ioKestra👾🟡10CRITICAL
Access Control Bypass in Kestra Orchestration Platform
CVE-2026-53577
Kestra-ioKestra6.5MEDIUM
Authentication Vulnerability in Kestra Open-source Orchestration Platform
CVE-2026-55069
Kestra-ioKestra8.7HIGH

19 June 2026

Path Traversal Vulnerability in Kestra Orchestration Platform
CVE-2026-48129
Kestra-ioKestra6.5MEDIUM

5 May 2026

SQL Injection Vulnerability in Kestra by Kestra-io
CVE-2026-38428
Kestra-ioKestra9.8CRITICAL

3 April 2026

SQL Injection Vulnerability in Kestra Event-Driven Orchestration Platform
CVE-2026-34612
Kestra-ioKestra10CRITICAL

26 March 2026

User Input Vulnerability in Kestra Event-Driven Orchestration Platform
CVE-2026-33664
Kestra-ioKestra7.3HIGH

6 March 2026

Remote Code Execution Vulnerability in Kestra Event-Driven Orchestration Platform
CVE-2026-29082
Kestra-ioKestra7.3HIGH

7 July 2025

Stored XSS Vulnerability in Kestra Event-Driven Orchestration Platform
CVE-2025-53543
Kestra-ioKestra4.2MEDIUM