KE
Product
kestra
by kestra-io · last CVE Aug 18, 2026
On CISA KEVExploited in the wild
14
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 5Low 0
Watch

Add kestra to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-49869
In wildKEV
10.0
2%
Jun 26
Kestra: Unauthenticated Remote Code Execution via Authentication Bypass in `AuthenticationFilter`
Affected: < 1.0.45; >= 1.1.0, < 1.3.21
Showing 1