CISA added CVE-2026-49869, an unauthenticated OS command injection in the Kestra workflow orchestration platform, to its Known Exploited Vulnerabilities catalog after evidence of real attacks. The fla…
Kestra launched version 2.0 on September 8, 2026, adding agent governance features to its orchestration platform, with enterprise capabilities announced September 22, 2026. The release exposes any Kes…
A developer outlined a five-tier patch prioritization rule for handling Microsoft's September 2026 security update, which contained roughly 970 to 997 CVEs, more than 110 of them critical. The approac…
CISA added seven CVEs to its Known Exploited Vulnerabilities catalog in September 2026, three of which affect infrastructure common in self-hosted AI stacks: the LiteLLM AI gateway proxy, the Kestra w…
CISA added CVE-2026-49869, a CVSS 10.0 authentication bypass in Kestra OSS, to its Known Exploited Vulnerabilities catalog on September 2, 2026, after real-world attacks deploying crypto miners and ha…
A security checklist published in response to the September 2026 CISA Known Exploited Vulnerabilities wave warns that patching AI and workflow tooling such as BerriAI LiteLLM, the Kestra orchestrator,…
A security analysis found that LiteLLM, an AI gateway tied to CVE-2026-59822 (CVSS 8.8), had 34,412 internet-facing deployments, while workflow orchestration platform Kestra, affected by CVE-2026-4986…
Data engineering practitioner and author ssp.sh argues that the emerging wave of AI orchestrators is repeating the same scheduling, error-logging, and restartability patterns already solved by 15 year…
CISA has added seven vulnerabilities to its Known Exploited Vulnerabilities catalog, affecting AI infrastructure and web frameworks including LiteLLM, Starlette, Kestra, JFrog Artifactory, Sangoma Swi…
Microsoft Security Research has documented attacks targeting AI infrastructure components, including LiteLLM, RAGFlow, and Kestra, which were compromised and abused for credential theft, persistence, …
A security engineer evaluated seven workflow automation platforms—n8n, Activepieces, Dify, Windmill, Tracecat, Kestra, and Langflow—to build a SOC agent and found that nearly all are open core, with s…
A technical analysis maps emerging AI tools—Tessl, Goose, Archestra, Kestra, Modelplane, RAG, and MCP—onto distinct layers of an agent loop architecture, revealing that while tools will change, the un…