Security Digest

Kestra: known exploited vulnerabilities

1 Kestra CVE CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.

AddedCVEProduct and flawCISA due
2026-09-02CVE-2026-49869Kestra Kestra OSS
Kestra OSS OS Command Injection Vulnerability
2026-09-05