This vulnerability is being actively exploited in the wild, according to the CISA Known Exploited Vulnerabilities catalog. CISA added it on .
CVE-2026-49869: Kestra OSS OS Command Injection Vulnerability
- Identifier
- CVE-2026-49869
- Published
- Record updated
- Fixed in
- The source references a patch, a mitigation or a vendor advisory.
- Known exploitation
- Listed in the CISA Known Exploited Vulnerabilities catalog since September 2, 2026.
- EPSS
- 2.1%
Summary
Kestra OSS contains an OS command injection vulnerability (CVE-2026-49869) that allows an unauthenticated remote attacker to create and execute arbitrary workflows without credentials. The item is listed as actively exploited in the wild (CISA KEV).
Mitigation
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA's BOD 26-04 Prioritizing Security Updates Based on Risk and CISA's Forensics Triage Requirements. Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. Due date: 2026-09-05.
Related items
- MediumCVE-2026-121936: easyVoice server-side request forgery through openaiBaseUrl in /api/v1/ttsSimilar attack · NVD/CVE Database
- MediumCVE-2026-118628: MLflow get-artifacts server-side request forgery information disclosureSimilar attack · NVD/CVE Database
- HighCVE-2026-118625: MLflow Tracking Server privilege escalation via get_endpointsSimilar attack · NVD/CVE Database
- InfoWhen trust becomes the payload: Inside the threats, etc quarterly reportSimilar attack · Elastic Security Labs
- MediumCritical Langflow flaws enable authentication bypass and RCESimilar attack · CSO Online