Unauthenticated RCE in Kestra via Auth-Filter Bypass (CVE-2026-51576)

github.com 2026-07-02查看中文 →

Security AdvisoryCVE-2026-51576Criticalkestra

Affected:

kestra <= 1.3.20

Fixed in:

1.0.45
1.3.21

Referenced CVEs: CVE-2026-53576 · 10.0

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Buffer Overflow Vulnerability Fix in MeshUtils C++ with SanitizeUTF8 PoC 2026-07-20 ci4CMS v0.31.8 Stored XSS Vulnerability in html_purify with POC 2026-07-20 v0.31.9.0 Security Patch: Critical Stored XSS, FileEditor Defects, and Hardening 2026-07-20 CVE-2024-4358: GitHub Actions pull_request_target CI/CD Privilege Escalation in meshastic/firmware 2026-07-20 Class and Exam Timetabling System V1.0 Pre-Auth SQL Injection Vulnerability with POC 2026-07-19

Offline Archive

Offline screenshot & PDF are Pro-exclusive