{"id":"kestra-oss-command-injection-sep-2026","category":"patch","status":"closed","title":"Kestra OSS command-injection flaw CVE-2026-49869 exploited; fixes available","tldr":"Attackers are exploiting a login bypass in Kestra OSS workflow servers to run code without credentials. Administrators should install 1.0.45 or 1.3.21 for their branch, restrict network access and check for unauthorised workflows.","summary":"CVE-2026-49869 affects Kestra OSS, software businesses use to automate workflows. Its authentication filter incorrectly exempts some requests from login checks, allowing an attacker with network access to create and run workflows without credentials. Default script plugins let those workflows execute commands with root privileges inside the worker container; Kestra did not confirm an escape to the underlying host. The vendor says installations using Basic Auth are affected, including internal servers an attacker can reach. Kestra identifies 1.0.45 and 1.3.21 as fixed. Check Point’s affected-version wording extends to 1.0.45, conflicting with Kestra’s explicit fixed-version list; the remediation here follows Kestra. CISA confirmed exploitation by adding the flaw to its catalogue on 2 September, and IONIX reports tracking exploitation attempts. As checked on 3 November, the reviewed sources do not identify victims, quantify attacks or establish that exploitation has stopped.","action":"Nothing to install on family phones or computers: this affects business workflow servers. If your business uses Kestra OSS, ask IT to install 1.0.45 or 1.3.21 for the relevant branch and check workflows and execution logs for unauthorised activity. Until updated, restrict access to trusted networks.","product":"Kestra OSS workflow automation server","audience":"work","severity":"critical","patch":"patched","exploited":true,"cves":["CVE-2026-49869"],"tags":["kestra","oss","authentication-bypass","command-injection","remote-code-execution","actively-exploited"],"affected":["Kestra OSS < 1.0.45 using Basic Auth","Kestra OSS >= 1.1.0, < 1.3.21 using Basic Auth"],"fixed":["1.0.45","1.3.21"],"matches":[],"sources":[{"kind":"advisory","title":"Unauthenticated Remote Code Execution via Authentication Bypass in AuthenticationFilter","url":"https://github.com/kestra-io/kestra/security/advisories/GHSA-5vc5-wxxq-3fjx","by":"Kestra","date":"2026-06-03"},{"kind":"advisory","title":"CVE-2026-49869: CNA record and CISA exploitation listing","url":"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/49xxx/CVE-2026-49869.json","by":"GitHub CNA, CISA / CVE Program","date":"2026-09-03"},{"kind":"research","title":"CVE-2026-49869 – Unauthenticated RCE via Authentication Bypass – Kestra prior to 1.0.45 / 1.3.21","url":"https://www.ionix.io/threat-center/cve-2026-49869/","by":"IONIX","date":"2026-06-28"},{"kind":"advisory","title":"Kestra Remote Code Execution (CVE-2026-49869)","url":"https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-11124.html","by":"Check Point","date":"2026-09-06"}],"started":"2026-09-02","closed":"2026-09-06","created":"2026-11-03T22:13:39.185Z","updated":"2026-11-03T22:13:39.185Z","cve_notes":[{"cve":"CVE-2026-49869","name":"Login bypass in Kestra OSS AuthenticationFilter","what":"Incorrect request checking in Kestra OSS's authentication filter lets a network attacker bypass Basic Auth and run workflows that execute commands with root privileges inside the worker container.","severity":"critical","cvss":10}],"timeline":[{"at":"2026-09-06","added":"2026-11-03T22:11:23.504Z","kind":"other","text":"Check Point updated its advisory describing intrusion-prevention coverage for exploitation attempts. Its affected-version wording extends to 1.0.45, whereas Kestra explicitly identifies 1.0.45 as fixed.","url":"https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-11124.html","by":"Check Point","patch":null},{"at":"2026-09-02","added":"2026-11-03T22:11:23.504Z","kind":"cisa-added","text":"CISA added CVE-2026-49869 to its Known Exploited Vulnerabilities catalogue, confirming use in attacks. CISA's contribution to the CVE record records that listing date.","url":"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/49xxx/CVE-2026-49869.json","by":"CISA / CVE Program","patch":null},{"at":"2026-06-26","added":"2026-11-03T22:11:23.504Z","kind":"other","text":"The CVE record was published with affected ranges below 1.0.45, and from 1.1.0 up to but excluding 1.3.21. It confirmed both fixed versions.","url":"https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/49xxx/CVE-2026-49869.json","by":"GitHub CNA / CVE Program","patch":null},{"at":"2026-06-03","added":"2026-11-03T22:11:23.504Z","kind":"disclosed","text":"Kestra published its critical authentication-bypass advisory, naming 1.0.45 and 1.3.21 as patched versions. A network attacker could run code without logging in.","url":"https://github.com/kestra-io/kestra/security/advisories/GHSA-5vc5-wxxq-3fjx","by":"Kestra","patch":"patched"}],"url":"https://hard.fyi/live/kestra-oss-command-injection-sep-2026/","json":"https://hard.fyi/api/live?id=kestra-oss-command-injection-sep-2026"}