agentprime: kestraEvery new CVE for kestra.https://agentprime.io/CVE-2026-73246: Kestra: Unauthenticated management `/worker` endpoint exposes live task configuration and plaintext credentialshttps://agentprime.io/advisories/CVE-2026-73246/https://agentprime.io/advisories/CVE-2026-73246/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 21:45:40 GMTCVECVE-2026-49869: Kestra: Unauthenticated Remote Code Execution via Authentication Bypass in `AuthenticationFilter`https://agentprime.io/advisories/CVE-2026-49869/https://agentprime.io/advisories/CVE-2026-49869/CVSS 10.0 (Critical). Critical: In CISA’s KEV catalogue since 2 Sept 2026: it is known to be exploited. CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Jun 2026 20:58:19 GMTCVEcriticalKEVCVE-2026-45807: Kestra: Path traversal via URL-encoded "%2E%2E" in execution and namespace file endpoints allows arbitrary file readhttps://agentprime.io/advisories/CVE-2026-45807/https://agentprime.io/advisories/CVE-2026-45807/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Jun 2026 20:57:13 GMTCVECVE-2026-49984: Kestra: Path traversal in `LocalStorage` allows any authenticated user to read arbitrary server files via the execution file-download API (`\..\` bypasses the `..` guard)https://agentprime.io/advisories/CVE-2026-49984/https://agentprime.io/advisories/CVE-2026-49984/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Jun 2026 20:55:44 GMTCVECVE-2026-53576: Kestra: Unauthenticated RCE via /configs path-suffix auth-filter bypasshttps://agentprime.io/advisories/CVE-2026-53576/https://agentprime.io/advisories/CVE-2026-53576/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Jun 2026 20:54:08 GMTCVEcriticalCVE-2026-53577: Kestra: Cross-Execution File Read via Preview Endpoint (IDOR)https://agentprime.io/advisories/CVE-2026-53577/https://agentprime.io/advisories/CVE-2026-53577/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Jun 2026 20:52:04 GMTCVECVE-2026-55069: Kestra BasicAuth Password Stored as SHA-512 Enables Offline Brute-Force Attackhttps://agentprime.io/advisories/CVE-2026-55069/https://agentprime.io/advisories/CVE-2026-55069/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Jun 2026 20:50:09 GMTCVECVE-2026-48129: Kestra task inputFiles accepts traversal filenames for worker file writeshttps://agentprime.io/advisories/CVE-2026-48129/https://agentprime.io/advisories/CVE-2026-48129/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Jun 2026 20:16:24 GMTCVECVE-2026-34612: Kestra: Remote Code Execution via SQL Injectionhttps://agentprime.io/advisories/CVE-2026-34612/https://agentprime.io/advisories/CVE-2026-34612/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Apr 2026 22:39:31 GMTCVEcriticalCVE-2026-33664: Kestra Vulnerable to Stored Cross-Site Scripting via Flow YAML Fieldshttps://agentprime.io/advisories/CVE-2026-33664/https://agentprime.io/advisories/CVE-2026-33664/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 21:13:12 GMTCVECVE-2026-29082: Kestra: Stored Cross-Site Scripting in Markdown File Previewhttps://agentprime.io/advisories/CVE-2026-29082/https://agentprime.io/advisories/CVE-2026-29082/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Mar 2026 16:33:31 GMTCVECVE-2025-53543: Kestra allows Stored XSS before 0.22https://agentprime.io/advisories/CVE-2025-53543/https://agentprime.io/advisories/CVE-2025-53543/CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Jul 2025 19:54:46 GMTCVE