CVE-2026-75430: Critical severity PowerJob Worker vulnerability
Published Sep 4, 2026
·Updated
PowerJob Worker version 5.1.2 (and likely earlier versions) exposes the /worker/deployContainer HTTP endpoint without authentication on the default transport port. This allows a remote attacker to execute arbitrary code.
Affected Software
1 affected component
PowerJob Worker>=0<=5.1.2
Event History
Sep 4, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverity
Frequently Asked Questions
1
Which deployments are exposed?
PowerJob Worker 5.1.2 is affected, and earlier versions are likely affected. Exposure occurs when the Worker's default transport port is reachable by an attacker, because the /worker/deployContainer endpoint is available without authentication.
2
What does an attacker need to exploit this issue?
An attacker needs network access to the PowerJob Worker default transport port. No authentication or user interaction is required, and successful exploitation can result in arbitrary code execution.