Internet measurement of CVE-2026-49869, an unauthenticated OS command injection in the Kestra workflow orchestration platform rated 10.0 and added to CISA's Known Exploited Vulnerabilities catalog on …
CISA added CVE-2026-49869, an unauthenticated OS command injection in the Kestra workflow orchestration platform, to its Known Exploited Vulnerabilities catalog after evidence of real attacks. The fla…
CISA added CVE-2026-49869, a CVSS 10.0 authentication bypass in Kestra OSS, to its Known Exploited Vulnerabilities catalog on September 2, 2026, after real-world attacks deploying crypto miners and ha…
A security analysis found that LiteLLM, an AI gateway tied to CVE-2026-59822 (CVSS 8.8), had 34,412 internet-facing deployments, while workflow orchestration platform Kestra, affected by CVE-2026-4986…
Microsoft Security Research has documented attacks targeting AI infrastructure components, including LiteLLM, RAGFlow, and Kestra, which were compromised and abused for credential theft, persistence, …