kestra
v2.0.10Orchestrate everything, everywhere. The open-source control plane for workflows across data, infrastructure, business processes and AI agents. Declarative YAML, event-driven, any language, Git-versioned, scalable to millions of executions.
- Maintenance
- Active2490 commits in 3 months · bus factor 4
- License
- Apache-2.0Permissive · OSI-approved
- Security
- 30 advisories2 critical, 11 high, 16 medium, 1 low · Scorecard 6.3/10
- Supported versions
- No scheduleendoflife.date does not track this project
30.2k stars · 3.5k forks · 698 open issues · last release 5 days ago · data checked 4 hours ago
Security advisories
All advisories on GitHubThe 30 most recent advisories published by the maintainers: 2 critical, 11 high, 16 medium, 1 low. Check the patched version against the one you run.
- mediumGHSA-wv8g-gfwp-cj9wNov 12, 20261.3 LTS: a FILE input sent as a text value copies any file on the server host into the execution (allowed-paths bypass; fix for kestra-ee#10308 not backported)
- Affected
- <= 1.3.45
- Patched in
- 1.3.46
- highGHSA-2355-646m-8m98Nov 12, 2026Unauthenticated webhook multipart requests exhaust Kestra webserver memory
- Affected
- >= 2.0.0
- Patched in
- 2.0.9
- mediumGHSA-4cpw-cp2h-qh6qNov 3, 2026MySQL case-insensitive collation conflates differently-cased namespaces, flows, KV keys and trigger state (potential namespace/tenant isolation bypass in EE)
- Affected
- <= 2.0.7; <= 1.3.44
- Patched in
- 2.0.8; 1.3.45
- mediumGHSA-v3p3-qrvf-jgmrNov 3, 2026Dashboard OR filter on JDBC returns other tenants' rows through charts/preview on 1.3.x
- Affected
- <= 1.3.44
- Patched in
- 1.3.45
- mediumGHSA-f5h6-rg96-px74Oct 21, 2026Kestra's HTTP allow/deny lists match URI text but never resolve the hostname, so deny-listed IPs are reachable through DNS names
- Affected
- >= 2.0.0 <= 2.0.7
- Patched in
- 2.0.8
- mediumGHSA-wvqw-j4rf-jhf8Oct 6, 2026SSRF deny-list bypass via decimal-IP and null-host (underscore authority) in HttpClient egress matcher
- Affected
- >= 2.0.0
- Patched in
- 2.0.4
- highGHSA-94pv-f379-3gp3Oct 6, 2026Persistent administrator account takeover cause revoked credential remains valid on webserver
- Affected
- >= 1.3.24
- Patched in
- 1.3.41, 2.0.0
- mediumGHSA-xh2h-59mw-8qr2Sep 29, 2026Deleted namespace file content remains readable via the revision parameter
- Affected
- >= 1.2.0
- Patched in
- 1.3.40; 2.0.3
- highGHSA-hrr4-xg8h-5p6fSep 29, 2026Unauthenticated gRPC control plane on port 50051 exposes and mutates KV/namespace metadata and worker jobs
- Affected
- >= 2.0.0
- Patched in
- 2.0.3
- mediumGHSA-g769-pv29-qhffSep 29, 2026Possible HTTP allowed-list regression introduced in commit 0354ddf8
- Affected
- 2.0.1
- Patched in
- 2.0.2
- mediumCVE-2026-123350Sep 29, 2026Kestra executes soft-deleted flows: the execution path resolves flows with `allowDeleted=true` and has no deleted-state check, so a deleted flow keeps running and keeps accessing its secrets after deletion
- Affected
- <= 1.3.38
- Patched in
- 1.3.39, 2.0.0
- criticalGHSA-rjhm-qm6w-m7x9Sep 29, 2026Unauthenticated remote code execution via encoded-separator filter evasion
- Affected
- < 1.0.60; >= 1.1.0, <= 1.1.20; >= 1.2.0, <= 1.2.24; >= 1.3.0, < 1.3.38
- Patched in
- 1.0.60; 1.3.38
- criticalGHSA-j5cv-8rw9-vv2pSep 29, 2026Authentication Bypass via Prefix-Matched open-urls (Unauthenticated Flow Execution, RCE and Secret Disclosure)
- Affected
- <= 1.3.37
- Patched in
- 1.3.38
- mediumCVE-2026-123349Sep 29, 2026Unauthenticated flow/namespace enumeration oracle in Kestra webhook endpoint via distinguishable "Flow not found" vs "Webhook not found" responses
- Affected
- <= 1.3.38, 2.0.0
- Patched in
- 1.3.39, 2.0.1
- lowCVE-2026-122263Sep 29, 2026Content-Disposition filename parameter injection in Kestra via an unvalidated `namespace` path segment on the namespace-files export endpoint
- Affected
- <= 2.0.0
- Patched in
- 2.0.1
- mediumGHSA-gxqx-8c54-274xSep 29, 2026SSRF allow and deny list bypassable by redirect, userinfo and subdomain suffix
- Affected
- 2.0.0
- Patched in
- >= 2.0.1
- mediumCVE-2026-122262Sep 29, 2026Verbose error messages leak the internal SQL query and database schema in Kestra via an unvalidated `sort` parameter on multiple list/search endpoints (schema-enumeration oracle)
- Affected
- <= 2.0.0
- Patched in
- 2.0.0
- mediumGHSA-38rc-2jxj-2h75Sep 29, 2026Unauthenticated Username Enumeration via Timing Oracle
- Affected
- < 2.0.0
- Patched in
- 2.0.0
- highGHSA-j26h-55cv-c7pmSep 16, 2026Reflected XSS leading to Account Takeover
- Affected
- < 1.3.36
- Patched in
- 1.3.36
- highGHSA-8468-cj9j-hg26Sep 7, 2026Stored XSS via javascript: URL in KsMarkdown — xssProtection sanitizer does not cover Markdown-parsed link nodes
- Affected
- <= v2.0.0-rc11
- Patched in
- v2.0.0-rc12
- mediumGHSA-hxgr-m653-65pwSep 4, 2026Kestra KV store namespace access check uses startsWith without a dot separator: in Enterprise editions where an admin restricted Allowed Namespaces to com.a, a user may still read/write KV entries in com.aa or com.ab (parent-prefix collision)
- Affected
- >= 0.18.0
- Patched in
- 2.0.0-rc13; 1.3.36; 1.0.58
- highGHSA-crq7-3xg2-hjchAug 28, 2026Stored XSS via Unescaped Namespace File Name [Latest Release <= 1.3.31]
- Affected
- < 1.3.36
- Patched in
- 1.3.36
- highCVE-2026-55839Aug 11, 2026Stored XSS via custom Markdown [[link]] attribute injection in Kestra
- Affected
- 1.3.22
- Patched in
- 1.3.24
- mediumGHSA-74gc-ph6h-px92Aug 7, 2026Authentication bypass in Kestra MCP management APIs via PUBLIC MCP server id route collision
- Affected
- >= v2.0.0-rc1, <= v2.0.0-rc5
- Patched in
- v2.0.0-rc6
- mediumCVE-2026-73245Aug 7, 2026Unauthenticated management/actuator endpoints exposed on port 8081 (/env, /loggers) bypass API basic-auth
- Affected
- < 2.0.0
- Patched in
- >= 2.0.0
- highCVE-2026-73246Aug 7, 2026Unauthenticated management `/worker` endpoint exposes live task configuration and plaintext credentials
- Affected
- =1.3.26
- Patched in
- 2.0.0-rc6
- highCVE-2026-73247Jul 23, 2026SSRF via Pebble http() function allows unauthenticated access to internal services & cloud metadata
- Affected
- < 2.0.0
- Patched in
- 2.0.0
- highCVE-2026-55069Jun 25, 2026Kestra BasicAuth Password Stored as SHA-512 Enables Offline Brute-Force Attack
- Affected
- <=v1.3.1
- Patched in
- 1.3.24
- highCVE-2026-49984Jun 3, 2026Path traversal in `LocalStorage` allows any authenticated user to read arbitrary server files via the execution file-download API (`\..\` bypasses the `..` guard)
- Affected
- <= 1.3.22; <= 1.0.44
- Patched in
- 1.3.23; 1.0.45
- mediumCVE-2026-53577Jun 3, 2026Cross-Execution File Read via Preview Endpoint (IDOR)
- Affected
- <= 1.3.19
- Patched in
- 1.0.45, 1.3.21