EUVD-2026-27426
GHSA-9jrq-5wf3-m9fp
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from Vendor (mitre) · only source for this CVE.
CVSS VectorVendor: mitre
Lifecycle Timeline
2DescriptionCVE.org
Kestra v1.3.3 and before is vulnerable to SQL Injection. The vulnerability occurs because user-controlled input from a GET parameter is directly concatenated into an SQL query without proper sanitization or parameterization. As a result, attackers can inject arbitrary SQL expressions into the database query.
AnalysisAI
SQL injection in Kestra workflow orchestration platform versions 1.3.3 and earlier enables remote unauthenticated attackers to execute arbitrary SQL commands and fully compromise the application database. The vulnerability stems from unsanitized GET parameters directly concatenated into SQL queries, allowing complete data exfiltration, modification, and potential database server compromise. Despite critical CVSS 9.8 severity, EPSS score of 0.01% (2nd percentile) suggests minimal observed exploitation attempts, though GitHub security advisory publication indicates vendor acknowledgment and likely patch availability.
Technical ContextAI
Kestra is an open-source workflow orchestration and scheduling platform. This vulnerability is a classic CWE-89 SQL Injection flaw occurring when user-supplied input from HTTP GET parameters is concatenated directly into SQL query strings without parameterized queries or input validation. The CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N indicates the vulnerable endpoint is network-accessible, requires no authentication, and has low attack complexity. The affected component appears to be Kestra's web API layer that handles workflow queries or administrative functions. SQL injection at this level can bypass all application-layer access controls since the attacker is manipulating database operations directly. The presence of a GitHub Security Advisory (GHSA-365w-2m69-mp9x) suggests the vulnerability was responsibly disclosed to the Kestra project maintainers.
RemediationAI
Upgrade to Kestra version 1.3.4 or later if available, verifying the fix version through the GitHub security advisory at https://github.com/kestra-io/kestra/security/advisories/GHSA-365w-2m69-mp9x which should specify the exact patched release. If immediate patching is not feasible, implement network-level access controls to restrict Kestra API endpoints to trusted IP ranges only, reducing attack surface from internet-wide to internal networks, though this does not eliminate risk from authenticated internal users or compromised systems. Web application firewall (WAF) rules detecting SQL injection patterns in GET parameters can provide defense-in-depth, but may cause false positives on legitimate queries containing SQL-like syntax and should be tested thoroughly before production deployment. Review application logs for suspicious GET parameter patterns containing SQL keywords (UNION, SELECT, OR 1=1, etc.) to detect potential exploitation attempts. As a longer-term architectural improvement, ensure all database interactions use parameterized queries or ORM frameworks that prevent SQL injection by design. Note that workarounds only reduce risk and are not substitutes for applying the vendor patch.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today