CVE-2026-49869
CRITICAL CISACVSS Score
N/A
Severity
CRITICAL
Source
CISA
Published
Sep 02, 2026
Description
Kestra โ Kestra OSS: Kestra OSS contains an OS command injection vulnerability that could allow an unauthenticated remote attacker to create and execute arbitrary workflows without credentials.