Advisories · Technology

StackStorm st2.

Every CVE that names StackStorm st2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-85514 CVE record

CVSS 5.3 Medium

StackStorm st2 API Key auth.py privileges management
- StackStorm st2
- Privilege escalation
Not analysed yet 4 Sept 2026
CVE-2026-85513 CVE record

CVSS 5.3 Medium

StackStorm st2 NoOp RBAC backend actionexecutions.py privileges management
- StackStorm st2
- Privilege escalation
Not analysed yet 4 Sept 2026