MSRXMSRXSecurity
Vendors / Kestra

Kestra vulnerabilities being exploited

1 Kestra flaw was confirmed exploited in the wild in the past 365 days, across 1 product: Kestra OSS. If you run any of them, patch these first.

AddedExploited vulnerabilityFix by
2026-09-02CVE-2026-49869 Kestra OSS
Kestra OSS OS Command Injection Vulnerability

Kestra OSS contains an OS command injection vulnerability that could allow an unauthenticated remote attacker to create and execute arbitrary workflows without credentials.

2026-09-05
Watch my Kestra softwareScan a websiteAll vendors

Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.