What is the CVSS score of CVE-2026-34612?

CVE-2026-34612 has a CVSS 3.1 base score of 9.0 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Docker are affected by CVE-2026-34612?

Kestra orchestration platform versions prior to 1.3.7 contain a critical SQL injection vulnerability in the flow search endpoint that allows authenticated users to execute arbitrary operating system…

How to fix or mitigate CVE-2026-34612?

Within 24 hours: Inventory all Kestra deployments and identify instances running versions prior to 1.3.7; disable or restrict network access to the /api/v1/main/flows/search endpoint. Within 7 days: Upgrade to Kestra 1.3.7 or later immediately upon availability confirmation; validate upgrade in non-production environment first. Within 30 days: Conduct forensic review of access logs for the search endpoint dating back 90 days; rotate all database credentials and review container escape indicators; implement network segmentation to limit container-to-host communication.

Docker CVE-2026-34612

CRITICAL

SQL Injection (CWE-89)

2026-04-03 GitHub_M

RCE Docker SQLi PostgreSQL Kestra Kestra Io

9.0

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.0 CRITICAL

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Re-analysis Queued

Jul 24, 2026 - 22:23 vuln.today

cvss_changed

CVSS changed

Jul 24, 2026 - 22:23 NVD

9.9 (CRITICAL) 9.0 (CRITICAL)

Analysis Generated

Apr 03, 2026 - 23:15 vuln.today

CVE Published

Apr 03, 2026 - 22:39 nvd

CRITICAL 9.9

DescriptionNVD

Kestra is an open-source, event-driven orchestration platform. Prior to version 1.3.7, Kestra (default docker-compose deployment) contains a SQL Injection vulnerability that leads to Remote Code Execution (RCE) in the following endpoint "GET /api/v1/main/flows/search". Once a user is authenticated, simply visiting a crafted link is enough to trigger the vulnerability. The injected payload is executed by PostgreSQL using COPY ... TO PROGRAM ..., which in turn runs arbitrary OS commands on the host. This issue has been patched in version 1.3.7.

AnalysisAI

SQL injection in Kestra orchestration platform's flow search endpoint (GET /api/v1/main/flows/search) enables remote code execution on the underlying PostgreSQL host. Authenticated users can trigger the vulnerability by visiting a malicious link, exploiting PostgreSQL's COPY TO PROGRAM feature to execute arbitrary OS commands on the Docker container host. Affects Kestra versions prior to 1.3.7 in default docker-compose deployments. With CVSS 9.9 (Critical) and low attack complexity requiring only low-privilege authentication, this represents a severe risk for container escape and host compromise scenarios.

Technical ContextAI

Kestra is an event-driven workflow orchestration platform built on PostgreSQL for metadata storage. The vulnerability stems from improper input sanitization (CWE-89) in the flow search API endpoint, allowing SQL injection into PostgreSQL queries. The attack chain exploits PostgreSQL's COPY TO PROGRAM command, a native database feature that can execute arbitrary shell commands on the database server when provided malicious SQL input. In the default docker-compose deployment architecture, this translates to code execution within the PostgreSQL container context, which may share resources or network access with the host system. The affected product (cpe:2.3:a:kestra-io:kestra) is particularly vulnerable because the search endpoint processes user-controlled input without adequate parameterization, and the database connection has sufficient privileges to invoke COPY operations. This vulnerability class is particularly dangerous in containerized environments where database and application services often run with elevated permissions.

RemediationAI

Upgrade immediately to Kestra version 1.3.7 or later, which contains fixes for the SQL injection vulnerability as documented in the official release at https://github.com/kestra-io/kestra/releases/tag/v1.3.7. The patch implemented in commit 3926762795df8ad3e03924b370c51832ed3a21d3 addresses input sanitization in the flow search endpoint. Organizations unable to upgrade immediately should implement network-level access controls to restrict the /api/v1/main/flows/search endpoint to trusted IP ranges only, though this is a temporary mitigation and does not eliminate risk from authenticated insider threats or compromised credentials. Review PostgreSQL container permissions and consider running the database with reduced privileges that prevent COPY TO PROGRAM execution if operationally feasible. Consult the vendor security advisory at https://github.com/kestra-io/kestra/security/advisories/GHSA-365w-2m69-mp9x for additional guidance. Audit authentication logs for suspicious access patterns to the vulnerable endpoint prior to patching.