Kestra vulnerabilities
We track 1 vulnerability in Kestra products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 5, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Kestra vulnerabilities
- 9.8 Critical severity
Kestra: Improper Neutralization of Special Elements used in an SQL Command
Kestra v1.3.3 and before is vulnerable to SQL Injection. The vulnerability occurs because user-controlled input from a GET parameter is directly concatenated into an SQL query without proper sanitization or parameterization. As a result, attackers can inject a