---
title: "Security digest: June 3, 2026"
url: https://erroneo.us/security/2026-06-03/
description: "June 3, 2026 vulnerability digest: 1 brief (Kestra CVE-2026-49869: Exploited Unauthenticated…); 1 CISA KEV addition (Mirasvit); 6 critical advisories…"
type: security-digest-day
section: "Security Digest"
date_published: 2026-06-03
date_modified: 2026-09-02
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: June 3, 2026

1 editorial brief, 1 known exploited (cisa kev) addition and 6 critical advisories.

## Take stock

- Act now: Kestra CVE-2026-49869: Exploited Unauthenticated RCE . Teams self-hosting Kestra OSS 1.0.x before 1.0.45 or 1.1.0 through 1.3.20, especially where the API port is reachable from the internet or shared networks or the worker has the Docker socket mounted.
- Do you run any of these? Mirasvit Mirasvit Full Page Cache Warmer. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2026-06-06.
- PyPI: 5 critical advisories ( mlflow , jupyter_enterprise_gateway , mistral ). Check with pip-audit (or: pip show <package>) .
- Maven: 1 critical advisory ( org.apache.mina:mina-core ). Check with mvn dependency:tree -Dincludes=<groupId>:<artifactId> .
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Editorial briefs

- **Act now** [Kestra CVE-2026-49869: Exploited Unauthenticated RCE](https://erroneo.us/security/briefs/kestra-cve-2026-49869-auth-bypass-rce/index.md): If you run Kestra OSS below 1.0.45 or 1.3.21 and anyone untrusted can reach its API, assume it is compromised: upgrade, then rotate every secret the workers could see.

## Known exploited (CISA KEV)

- [CVE-2026-45247](https://erroneo.us/security/cve/CVE-2026-45247/index.md) Mirasvit Mirasvit Full Page Cache Warmer: Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability (CISA due 2026-06-06)

## Critical advisories

- [CVE-2026-47065](https://erroneo.us/security/cve/CVE-2026-47065/index.md) Apache MINA: Critical Deserialization Allow-list Bypass via resolveProxyClass — Maven org.apache.mina:mina-core >= 2.2.0, < 2.2.8 → 2.2.8; Maven org.apache.mina:mina-core >= 2.1.0, < 2.1.13 → 2.1.13; Maven org.apache.mina:mina-core < 2.0.29 → 2.0.29
- [CVE-2026-4035](https://erroneo.us/security/cve/CVE-2026-4035/index.md) MLflow: Environment variable injection in AI Gateway secrets enables server-side credential exfiltration — PyPI mlflow < 3.11.0 → 3.11.0
- [CVE-2026-44181](https://erroneo.us/security/cve/CVE-2026-44181/index.md) Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection resulting in Remote Code Execution — PyPI jupyter_enterprise_gateway >= 2.0.0rc2, < 3.3.0 → 3.3.0
- [CVE-2026-44180](https://erroneo.us/security/cve/CVE-2026-44180/index.md) Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids Bypass — PyPI jupyter_enterprise_gateway >= 2.0.0rc1, < 3.3.0 → 3.3.0
- [CVE-2026-44182](https://erroneo.us/security/cve/CVE-2026-44182/index.md) Jupyter Enterprise Gateway: Kubernetes Manifest Injection in Jinja2 Template Rendering — PyPI jupyter_enterprise_gateway < 3.3.0 → 3.3.0
- [CVE-2026-41283](https://erroneo.us/security/cve/CVE-2026-41283/index.md) OpenStack Mistral allows Arbitrary Remote Code Execution when the API is exposed — PyPI mistral >= 20.0.0, < 20.1.1 → 20.1.1; PyPI mistral = 21.0.0 → no fix; PyPI mistral = 22.0.0 → no fix

---
Source page: https://erroneo.us/security/2026-06-03/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt