Cyber Alert: Kestra CVE-2026-49869 Gives Unauthenticated Attackers Root RCE in the Worker Container

CVE: CVE-2026-49869 Severity: Critical, CVSS 10.0 Affected: Kestra OSS before 1.0.45, and 1.1.0 through 1.3.20 Fixed: 1.0.45 and 1.3.21 Exploitation: Confirmed. Added to CISA KEV on September 2, 2026