← Back to feed
Vulnerabilities & PatchesEmerging1 sourceSep 2, 2026 · 00:00via CISA KEV

CVE-2026-49869 - Kestra OSS OS Command Injection Vulnerability

Brief

Kestra OSS contains an OS command injection vulnerability that could allow an unauthenticated remote attacker to create and execute arbitrary workflows without credentials.

Read more on CISA KEV