CVE-2026-49869 - Kestra: Unauthenticated Remote Code Execution via Authentication Bypass in `AuthenticationFilter`
CVE ID :CVE-2026-49869 Published : June 26, 2026, 8:58 p.m. | 4 hours, 13 minutes ago Description :Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, AuthenticationFilter in Kestra OSS uses request.getPath().endsWith("/configs") to whitelist the public...