{"uuid": "18542a14-6db9-40e0-9860-013bd58c3772", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://t.me/pphm_HackerNews/3222", "content": "\ud83d\udd34 Critical Orkes Conductor Vulnerability Exploited in Attacks\n\nA critical-severity vulnerability in Orkes Conductor that can be exploited without authentication has been in attackers\u2019 crosshairs for at least a month.\n\nConductor is an open source unified enterprise framework that allows organizations to orchestrate microservices, workflows, and AI agents.\n\nTracked as CVE-2026-58138 (CVSS score of 9.8), the critical bug is described as a remote code execution issue exploitable via inline workflow definitions submitted to the workflow API endpoint.", "creation_timestamp": "2026-09-20T10:00:05.135605Z"}