CVE-2026-49869

notes

CVE-2026-49869 — Kestra Kestra OSS: Kestra OSS OS Command Injection Vulnerability

1. Executive summary CVE-2026-49869 is an OS command injection vulnerability (CVSS 10.0 CRITICAL, CWE-78) in Kestra OSS, an open-source workflow orchestration

02 Sep 2026 · 6 min read read →

notes

When AI infrastructure becomes the target: Securing gateways and control points

1. Executive summary Microsoft Threat Intelligence reports active exploitation targeting three distinct AI infrastructure workloads: LiteLLM, RAGFlow, and Kestra. Attackers compromised these systems to steal credentials,

26 Aug 2026 · 9 min read read →

page 1 of 1