Kestra auth bypass lets attackers run root workflows

Kestra published GitHub Security Advisory GHSA-5vc5-wxxq-3fjx for CVE-2026-49869, a Critical CVSS 3.1 10.0 authentication bypass. The bug sits in AuthenticationFilter: the public config endpoint is whitelisted with a suffix match on paths that end in /configs, so any API path whose last segment is configs skips Basic Auth.

An unauthenticated caller who can reach the API can create and execute workflows. Default script plugins (shell, python, node, bash, and more than 80 others) then run as root inside the worker container. The advisory says Kestra OSS with default Basic Auth is in scope, and network access to the API port is enough even if the instance is not on the public internet.

CISA added the CVE to its Known Exploited Vulnerabilities catalog on 2 September 2026, in a seven-CVE batch that also included the JFrog Artifactory auth bypass and the SonicWall SMA 1000 pair. The federal BOD 26-04 due date was 5 September 2026 and has already passed. The catalog row requires forensic triage. CISA listed the bug because it has evidence of exploitation, without naming a group, and it records ransomware use as Unknown.

The same advisory documents a second path: Pebble's http() function has no URI filtering, so the bypass can also reach cloud metadata at 169.254.169.254. Fixes are 1.0.45 and 1.3.21 on the respective branches. Versions through 1.3.20 on the 1.3 line are called out as affected.

The advisory also limits the RCE: root inside the worker container, with no confirmed Docker-socket escape.

Some offers on this page may be paid placements or contain affiliate links.