CVE-2026-49869 1

CVE-2026-49869: Kestra OSS OS Command Injection Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Sep 02, 2026

Kestra OSS contains an OS command injection vulnerability that could allow an unauthenticated remote attacker to create and execute arbitrary workflows without credentials.

Vulnerabilities & Patching