// tag
Kestra
Security incidents tagged Kestra. Newest first.
- incidents
- 1
- live
- 0
- patched
- 1
## 1 Kestra incident in the last year
through Oct 22, 2026crit 4 · high 3 · med 2 · low 1 · upd ½severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½lessmore
show 1 older incident1 older incident
September 2026 1
highKestra Kestra OSS: Kestra OSS OS Command Injection Vulnerabilitypatched
› Kestra Kestra OSS patched
Kestra OSS contains an OS command injection vulnerability that could allow an unauthenticated remote attacker to create and execute arbitrary workflows without credentials. Added to CISA KEV on 2026-09-02.
open incident →CVE-2026-49869
