KE
Product
Kestra
On CISA KEVExploited in the wild
10
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 4High 3Medium 3Low 0
Watch
Add Kestra to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-53577 | 6.5 | Jun 26 | Kestra: Cross-Execution File Read via Preview Endpoint (IDOR) Affected: before 1.0.45; 1.1.0 before 1.3.21 |
| CVE-2026-33664 | 5.4 | Mar 26 | Kestra Vulnerable to Stored Cross-Site Scripting via Flow YAML Fields Affected: through 1.3.3 |
| CVE-2026-29082 | 5.4 | Mar 6 | Kestra: Stored Cross-Site Scripting in Markdown File Preview Affected: through 1.1.10 |
Showing 3