Vulnerabilities
Report: Update: CVE-2026-34612 - Kestra: Remote Code Execution via SQL Injection
CVE ID :CVE-2026-34612 Published : April 3, 2026, 11:17 p.m. | 39 minutes ago Description :Kestra is an open-source, event-driven orchestration platform. Prior to version 1.3.7, Kestra (default docker-compose deployment) contains a SQL Injection vulnerability that leads to Remote Code Execution (RCE) in the following endpoint
CVE Details
CVE ID
Published
April 3, 2026
Affected Product:
docker
Impact:
SQL Injection