Tag

Kestra

1 brief RSS

Kestra Orchestration Platform XSS Vulnerability (CVE-2026-33664)

Kestra versions up to 1.3.3 are vulnerable to a cross-site scripting (XSS) vulnerability (CVE-2026-33664) allowing arbitrary JavaScript execution by viewing crafted flow metadata.

kestra xss cve-2026-33664 orchestration

2r 1t Mar 27, 2026