Kestra
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 15 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 7, 2025 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Kestra: Stored XSS via custom Markdown [[link]] attribute injection
Kestra: SSRF via Pebble http() function allows unauthenticated access to internal services & cloud metadata
Kestra: Unauthenticated management/actuator endpoints exposed on port 8081 (/env, /loggers) bypass API basic-auth
Kestra OSS OS Command Injection Vulnerability
Kestra: Path traversal via URL-encoded "%2E%2E" in execution and namespace file endpoints allows arbitrary file read
Kestra: Path traversal in `LocalStorage` allows any authenticated user to read arbitrary server files via the execution file-download API (`\..\` bypasses the `..` guard)
Kestra: Unauthenticated RCE via /configs path-suffix auth-filter bypass
Kestra: Cross-Execution File Read via Preview Endpoint (IDOR)
Kestra BasicAuth Password Stored as SHA-512 Enables Offline Brute-Force Attack
Kestra task inputFiles accepts traversal filenames for worker file writes
Monitor Kestra in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.