{
  "affected": [
    {
      "affectedData": [
        {
          "product": "kestra",
          "vendor": "kestra-io",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.0.45"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.1.0, \u003c 1.3.21"
            }
          ]
        }
      ],
      "source": "security-advisories@github.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:kestra:kestra:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "ADC0ED79-69EF-4A2A-9F07-4791ED97124F",
              "versionEndExcluding": "1.0.45",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:kestra:kestra:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "73FD0092-9076-4F1C-9B93-E59C09D30E21",
              "versionEndExcluding": "1.3.21",
              "versionStartIncluding": "1.1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, the authentication filter for the REST API (@Filter(\"/api/v1/**\")) treats any request whose path ends in /configs as the public instance-config endpoint and forwards it without a credential check. kestra addresses its resources by URL path segments that the caller chooses (/api/v1/{tenant}/flows/{namespace}, /api/v1/{tenant}/executions/{namespace}/{id}, /api/v1/{tenant}/namespaces/{namespace}/kv/{key}). An anonymous caller picks the literal configs as the final segment, and the request bypasses Basic-Auth entirely. Because the bypass reaches the flow-create and execution-trigger routes, an unauthenticated caller creates a flow containing a Shell or Process task and runs it. The task executes as root inside the kestra container. The official docker-compose.yml mounts /var/run/docker.sock, so root in the container reaches the host Docker daemon. This vulnerability is fixed in 1.0.45 and 1.3.21."
    },
    {
      "lang": "es",
      "value": "Kestra es una plataforma de orquestaci\u00f3n de c\u00f3digo abierto e impulsada por eventos. Antes de las versiones 1.0.45 y 1.3.21, el filtro de autenticaci\u00f3n para la API REST (@Filter(\u201c/api/v1/**\u201d)) trata cualquier solicitud cuya ruta termine en /configs como el punto final p\u00fablico de configuraci\u00f3n de instancia y la reenv\u00eda sin una verificaci\u00f3n de credenciales. Kestra direcciona sus recursos mediante segmentos de ruta de URL que el llamador elige (/api/v1/{tenant}/flows/{namespace}, /api/v1/{tenant}/executions/{namespace}/{id}, /api/v1/{tenant}/namespaces/{namespace}/kv/{key}). Un llamador an\u00f3nimo elige el literal configs como el segmento final, y la solicitud omite completamente la autenticaci\u00f3n Basic-Auth. Debido a que la omisi\u00f3n alcanza las rutas de creaci\u00f3n de flujo y activaci\u00f3n de ejecuci\u00f3n, un llamador no autenticado crea un flujo que contiene una tarea Shell o Process y la ejecuta. La tarea se ejecuta como root dentro del contenedor kestra. El docker-compose.yml oficial monta /var/run/docker.sock, por lo que root en el contenedor alcanza el demonio Docker del host. Esta vulnerabilidad est\u00e1 corregida en las versiones 1.0.45 y 1.3.21."
    }
  ],
  "id": "CVE-2026-53576",
  "lastModified": "2026-10-25T17:10:00.197",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 10.0,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 6.0,
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-53576",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-06-29T15:02:08.660345Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-06-26T22:16:32.840",
  "references": [
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "url": "https://github.com/kestra-io/kestra/security/advisories/GHSA-2q47-568g-9h4f"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "url": "https://github.com/kestra-io/kestra/security/advisories/GHSA-2q47-568g-9h4f"
    }
  ],
  "sourceIdentifier": "security-advisories@github.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        },
        {
          "lang": "en",
          "value": "CWE-288"
        }
      ],
      "source": "security-advisories@github.com",
      "type": "Secondary"
    }
  ]
}