{"vulnerability": "CVE-2026-58138", "sightings": [{"uuid": "875fd95a-0c34-4bb4-be48-ab672683691e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-58138", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mpm3tty4fp25", "content": "CVSS 9.8. Unauthenticated. Remote code execution. No credentials required.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-58138-orkes-conductor-unauth-rce-poc/\n\n#InfoSec #DataBreach", "creation_timestamp": "2026-07-01T17:59:24.846064Z"}, {"uuid": "ee84b475-dc0c-4a89-a1e8-e0178f6e6a29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://t.me/GithubRedTeam/91343", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-58138-Conductor-Unauth-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-30 19:49:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-58138 \u2014 Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator (HostAccess.ALL). Lab + PoC, verified e2e (root).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:16.124089Z"}, {"uuid": "0eaaf680-2801-413a-93d4-db083310a614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://t.me/GithubRedTeam/91343", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-58138-Conductor-Unauth-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-30 19:49:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-58138 \u2014 Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator (HostAccess.ALL). Lab + PoC, verified e2e (root).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:32.744832Z"}, {"uuid": "755fe120-cb17-488f-b0a9-cb8ea07e4b35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91343", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-58138-Conductor-Unauth-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-30 19:49:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-58138 \u2014 Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator (HostAccess.ALL). Lab + PoC, verified e2e (root).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:25.663039Z"}, {"uuid": "11be28ad-ee8d-4e87-a344-6addc39507b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93570", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-58138\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a seqra\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 16:07:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T12:00:04.822425Z"}, {"uuid": "d83bfd91-46a9-45a4-9ae6-3467b0e3759a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93602", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-58138\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Ch4120N\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 20:36:22\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-58138 \u2014 Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator (HostAccess.ALL). Lab + PoC, verified e2e (root).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T12:00:04.915548Z"}, {"uuid": "cbe16dd5-b878-4206-9ba1-e099d09f9a24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "Telegram/aLUBIgd1oXw2vuhuFf6alCjtWAQyS8DwghI3-yppd5LMZjw", "content": "", "creation_timestamp": "2026-07-16T19:00:04.332675Z"}, {"uuid": "e6a9f421-9684-4e46-b8b7-9971500e28fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "Telegram/NdtFs6hNB9_NZbjw-blRCy5VLViEDDk3craQ6x0AEbHqe3s", "content": "", "creation_timestamp": "2026-07-16T19:00:05.481977Z"}, {"uuid": "708ccf85-3211-43b7-9f95-6af804620b07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "Telegram/qDbx2CcWW1ljYrgbnUu6Ex1maUX2VAjENXcPvjZN2_dh6iU", "content": "", "creation_timestamp": "2026-07-16T19:00:25.336424Z"}, {"uuid": "3a413567-696f-48e7-a15f-65fe58ba08ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "Telegram/EU_Y1WTP7XC2Unqgh398sSMzruBTYdUozEbcjvnJL3mtgJg", "content": "", "creation_timestamp": "2026-07-16T19:00:25.668380Z"}, {"uuid": "43fd28fe-5d60-4f54-929e-5867ed3f6c74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "Telegram/aLUBIgd1oXw2vuhuFf6alCjtWAQyS8DwghI3-yppd5LMZjw", "content": "", "creation_timestamp": "2026-07-17T00:00:26.194756Z"}, {"uuid": "95b7a234-e239-48d4-ae0a-a6122aee44b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "Telegram/NdtFs6hNB9_NZbjw-blRCy5VLViEDDk3craQ6x0AEbHqe3s", "content": "", "creation_timestamp": "2026-07-17T00:00:25.523735Z"}, {"uuid": "0660fed4-edd9-46f9-a048-917028273e22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "Telegram/qDbx2CcWW1ljYrgbnUu6Ex1maUX2VAjENXcPvjZN2_dh6iU", "content": "", "creation_timestamp": "2026-07-17T00:00:41.594686Z"}, {"uuid": "18408ba6-d076-474b-a1d7-4630ddfccebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "Telegram/EU_Y1WTP7XC2Unqgh398sSMzruBTYdUozEbcjvnJL3mtgJg", "content": "", "creation_timestamp": "2026-07-17T00:00:41.920806Z"}, {"uuid": "09bae698-04f3-4d4c-8673-aa93bf3ec7b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93602", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-58138\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Ch4120N\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 20:36:22\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-58138 \u2014 Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator (HostAccess.ALL). Lab + PoC, verified e2e (root).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T00:00:55.061433Z"}, {"uuid": "76f87c5c-4cf8-4553-95e9-a776567a7326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93570", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-58138\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a seqra\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 16:07:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T00:00:54.982910Z"}, {"uuid": "8f2c56a3-72f4-47c5-9470-74ec6e176afe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "Telegram/EU_Y1WTP7XC2Unqgh398sSMzruBTYdUozEbcjvnJL3mtgJg", "content": "", "creation_timestamp": "2026-07-18T00:00:09.179207Z"}, {"uuid": "058edc1e-3839-4e99-891b-93d257bcd680", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "Telegram/qDbx2CcWW1ljYrgbnUu6Ex1maUX2VAjENXcPvjZN2_dh6iU", "content": "", "creation_timestamp": "2026-07-18T00:00:09.721484Z"}, {"uuid": "a5d190b9-2430-4048-9248-99cb22618690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "https://t.me/DBXTERSLEARNING/1212", "content": "[webapps] OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution\n\nCVE-2026-58138 | 2026-08-10\n\n\ud83d\udd17 View  |  \u2b07\ufe0f Download", "creation_timestamp": "2026-08-22T21:00:06.088080Z"}, {"uuid": "7bfe3ca1-32bc-4736-abfd-869367a7aabe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "https://t.me/DBXTERSLEARNING/1212", "content": "[webapps] OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution\n\nCVE-2026-58138 | 2026-08-10\n\n\ud83d\udd17 View  |  \u2b07\ufe0f Download", "creation_timestamp": "2026-08-23T00:00:30.131303Z"}, {"uuid": "305b93ed-c099-437b-ae4c-b5408f3d2b25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "Telegram/6xbzrZHKWlySmltoOKJREHJqOUlaPiDVN1mUGUuwPSWTXlo", "content": "", "creation_timestamp": "2026-07-22T20:00:03.681731Z"}, {"uuid": "e3bca2a1-979a-46aa-b0e9-b04d8d567c94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "Telegram/oTCcthwftzUyvaLQLtY7FvG4NjMlnlzCmFsPRxIzpTLAzWg", "content": "", "creation_timestamp": "2026-07-22T22:00:03.589918Z"}, {"uuid": "4ce0c7c7-02c8-41ac-838d-3aba53251176", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "Telegram/oTCcthwftzUyvaLQLtY7FvG4NjMlnlzCmFsPRxIzpTLAzWg", "content": "", "creation_timestamp": "2026-07-23T00:00:05.047613Z"}, {"uuid": "5cad1937-5bfd-46f3-838c-805f3344d360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "Telegram/6xbzrZHKWlySmltoOKJREHJqOUlaPiDVN1mUGUuwPSWTXlo", "content": "", "creation_timestamp": "2026-07-23T00:00:05.240063Z"}, {"uuid": "8771c50c-f157-434c-920a-5809fd050186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://t.me/GithubRedTeam/94689", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-58138\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xgh057r3c0n\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-22 17:29:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-58138 - Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-23T04:00:05.189271Z"}, {"uuid": "41ec2be4-50e2-4608-a683-2bba92060ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94689", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-58138\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xgh057r3c0n\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-22 17:29:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-58138 - Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T00:00:21.458600Z"}, {"uuid": "fd6fb8a1-2874-49ce-b110-1e2ea291a4ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "Telegram/avwe1IcYmRD-5NAjxT7DyS1BekCoG2eAtzuvWz8J9dYWgZo", "content": "", "creation_timestamp": "2026-07-27T05:00:02.886082Z"}, {"uuid": "e40e8fb9-5b15-49a3-a314-dfe27e3fd68c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/90374388-1ad1-41e2-8cf2-28ed09a464b9", "content": "", "creation_timestamp": "2026-07-27T11:00:38.536154Z"}, {"uuid": "eae76908-a7a8-4b7b-8ef9-95d4c747b325", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "Telegram/avwe1IcYmRD-5NAjxT7DyS1BekCoG2eAtzuvWz8J9dYWgZo", "content": "", "creation_timestamp": "2026-07-28T00:00:45.898991Z"}, {"uuid": "f48e906a-3965-45c1-a0ac-d84586c2f862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "Telegram/Kn_b6ZfV_Zn3sftMYR5SsyU-8IQ4Qtei0GrxhBA123EDChM", "content": "", "creation_timestamp": "2026-09-06T08:00:06.338498Z"}, {"uuid": "25d6f0bd-798d-46f6-8626-b654baa8021e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "Telegram/Kn_b6ZfV_Zn3sftMYR5SsyU-8IQ4Qtei0GrxhBA123EDChM", "content": "", "creation_timestamp": "2026-09-07T01:00:24.670511Z"}, {"uuid": "a8d2d23f-15e5-4775-8cc3-b92d080a8e1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mvrsaew73h2v", "content": "CVE-2026-58138 enables unauthenticated remote code execution in Orkes Conductor via hostile INLINE workflow expressions that run OS commands as the Conductor process.\n", "creation_timestamp": "2026-09-18T08:54:36.440410Z"}, {"uuid": "bcc6b755-feef-4d09-af76-1800f07ca920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mvrsahwrzf2i", "content": "Orkes Conductor\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u653b\u6483\u3067\u60aa\u7528\u4e2d\n\n\u8a8d\u8a3c\u306a\u3057\u3067\u60aa\u7528\u53ef\u80fd\u306aOrkes Conductor\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u3001\u5c11\u306a\u304f\u3068\u30821\u30ab\u6708\u524d\u304b\u3089\u653b\u6483\u8005\u306e\u6a19\u7684\u306b\u3055\u308c\u3066\u3044\u307e\u3059\u3002 Conductor\u306f\u3001\u30de\u30a4\u30af\u30ed\u30b5\u30fc\u30d3\u30b9\u3001\u30ef\u30fc\u30af\u30d5\u30ed\u30fc\u3001AI\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u306e\u30aa\u30fc\u30b1\u30b9\u30c8\u30ec\u30fc\u30b7\u30e7\u30f3\u3092\u53ef\u80fd\u306b\u3059\u308b\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u306e\u7d71\u5408\u30a8\u30f3\u30bf\u30fc\u30d7\u30e9\u30a4\u30ba\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u3067\u3059\u3002 CVE-2026-58138(CVS", "creation_timestamp": "2026-09-18T08:54:38.772334Z"}, {"uuid": "63b434cc-80ab-4866-9026-83c7de244cd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://bsky.app/profile/sipirtu.com/post/3mvrvebcjc62r", "content": "A critical vulnerability identified as CVE-2026-58138 in Orkes Conductor allows unauthenticated remote code execution and has been exploited in attacks via inline workflow definitions.\n\nSource: SecurityWeek", "creation_timestamp": "2026-09-18T09:50:27.877363Z"}, {"uuid": "b713444b-bf7e-42d4-bf5d-2b2e88b77d48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://www.securityweek.com/critical-orkes-conductor-vulnerability-exploited-in-attacks/", "content": "CVE-2026-58138 is an unauthenticated remote code execution vulnerability that attackers can exploit via inline workflow definitions.\n\nThe post Critical Orkes Conductor Vulnerability Exploited in Attacks appeared first on SecurityWeek.", "creation_timestamp": "2026-09-18T16:00:36.901079Z"}, {"uuid": "733ae392-92f9-49fb-af4d-bb525114c068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mvsolbvgf22m", "content": "Why do we even bother configuring orchestration when Orkes Conductor allows unauthenticated remote code execution via CVE-2026-58138. Organisations relying on Orkes Conductor are getting battered in active attacks, courtesy of exposed inline workflow definitions. Protecting syste...\n\nRead full story", "creation_timestamp": "2026-09-18T17:21:46.424155Z"}, {"uuid": "645a470b-7c13-4dec-a3a7-822bf2d61ab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-58138", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mvsqq4jhfc2c", "content": "Orkes Conductor hit with active exploitation of CVE-2026-58138 \u2014 unauthenticated RCE, CVSS 9.8, triggered through workflow\u2026 https://0daynews.com/articles/2026-09-18-orkes-conductor-cve-2026-58138-rce-exploited/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-2396", "creation_timestamp": "2026-09-18T18:00:17.547879Z"}, {"uuid": "35369bd8-b1e4-412b-85be-28cf47589769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://www.securityweek.com/critical-orkes-conductor-vulnerability-exploited-in-attacks/", "content": "CVE-2026-58138 is an unauthenticated remote code execution vulnerability that attackers can exploit via inline workflow definitions.\n\nThe post Critical Orkes Conductor Vulnerability Exploited in Attacks appeared first on SecurityWeek.", "creation_timestamp": "2026-09-19T01:00:33.163759Z"}, {"uuid": "22322da2-2ce1-47cc-9626-3c84ae190732", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44487", "content": "Critical Orkes Conductor Vulnerability Exploited in Attacks\n\nCVE-2026-58138 is an unauthenticated remote code execution vulnerability that attackers can exploit via inline workflow definitions.\nThe post Critical Orkes Conductor Vulnerability Exploited in Attacks appeared first on SecurityWeek.\nhttps://www.securityweek.com/critical-orkes-conductor-vulnerability-exploited-in-attacks/", "creation_timestamp": "2026-09-19T04:00:03.696458Z"}, {"uuid": "f787edd3-7164-49af-9dac-fe775d0b8728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mvucoyzn432g", "content": "CVE-2026-58138 enables unauthenticated remote code execution in Orkes Conductor via crafted workflow definitions, allowing attackers to run arbitrary OS commands.\n", "creation_timestamp": "2026-09-19T08:54:26.816316Z"}, {"uuid": "349acf18-f601-4bcf-bc7d-efd1cec9733d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mvucp2lhdz2g", "content": "CVE-2026-58138 enables unauthenticated remote code execution in Orkes Conductor via crafted workflow definitions, allowing attackers to run arbitrary OS commands.\n", "creation_timestamp": "2026-09-19T08:54:28.065271Z"}, {"uuid": "8d30fa0c-97bd-4438-baea-668e237b3f68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mvucp47kpx2g", "content": "CVE-2026-58138 enables unauthenticated remote code execution in Orkes Conductor via crafted workflow definitions, allowing attackers to run arbitrary OS commands.\n", "creation_timestamp": "2026-09-19T08:54:29.963680Z"}, {"uuid": "1b3fbe94-0801-4a4d-bc30-88cdf7d1ce65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mvud3bytvm2e", "content": "Orkes Conductor \u306b\u8a8d\u8a3c\u306a\u3057 RCE \u8106\u5f31\u6027\u3001\u91ce\u751f\u3067\u306e\u60aa\u7528\u78ba\u8a8d\n\nOrkes Conductor \u30ef\u30fc\u30af\u30d5\u30ed\u30fc\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u306e CVE-2026-58138 \u304c\u91ce\u751f\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u8a8d\u8a3c\u306a\u3057\u3067\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u3067\u3001\u30d0\u30fc\u30b8\u30e7\u30f3 3.30.2 \u3067\u4fee\u6b63\u6e08\u307f\u3002\u5373\u5ea7\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u63a8\u5968\u3055\u308c\u307e\u3059\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-09-19T09:01:19.065753Z"}, {"uuid": "7837dfc6-1f8e-413c-8d54-8460acac9745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvuf2uegel2p", "content": "\ud83e\udd16 CVE-2026-58138 (CVSS 9.8): unauthenticated RCE in Orkes Conductor, exploited in the wild. Versions before 3.30.2 affected \u2014 update now.\nhttps://thehackernews.com/2026/09/critical-pre-auth-rce-in-orkes.html", "creation_timestamp": "2026-09-19T09:36:51.338080Z"}, {"uuid": "fc6f5a40-c89a-4759-9c05-dec01c3af4b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvuiwp2fzk2e", "content": "Orkes Conductor 3.21.21\u4ee5\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u3001\u8a8d\u8a3c\u306a\u3057\u3067\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u8106\u5f31\u6027\uff08CVE-2026-58138\uff09\u304c\u78ba\u8a8d\u3055\u308c\u3001\u65e2\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u307e\u3059\u3002", "creation_timestamp": "2026-09-19T10:46:06.997133Z"}, {"uuid": "68abab0c-1885-487f-a4e1-c0fd2f55cd61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://gist.github.com/ichintu/9cb86acb682c54ea7f3ed1ba71a63335", "content": "This daily threat intelligence roundup highlights critical software vulnerabilities and emerging AI security risks. Key traditional threats include unauthenticated RCEs in SolarWinds Access Rights Manager (CVE-2026-28326, patched), Orkes Conductor (CVE-2026-58138, actively exploited), and a critical command injection flaw in Totolink routers (CVE-2026-93742, public exploit). A high-severity authenticated RCE also affects The Welcomizer WordPress plugin (CVE-2026-4327). On the AI front, Google\u2019s Gemini model accidentally breached real corporate systems during a May 2026 security test due to a domain mix-up, while industry discussions emphasize that prompt injection and LLM routing flaws have become primary security challenges in AI agent development. Collectively, the reports underscore a threat landscape defined by high-impact software exploits and rapidly evolving AI vulnerabilities.", "creation_timestamp": "2026-09-19T12:02:14.836829Z"}, {"uuid": "1dad2da7-bf92-447c-b673-c3d5be1daceb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://thehackernews.com/2026/09/critical-pre-auth-rce-in-orkes.html", "content": "A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet.\n\nThe vulnerability in question is CVE-2026-58138 (CVSS v3.1 score: 9.8/CVSS v4 score: 9.3), which relates to a case of unauthenticated remote code execution.\n\n\"Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote", "creation_timestamp": "2026-09-19T13:00:34.528980Z"}, {"uuid": "fbf421d9-6259-4f43-9004-f6b7f440ed94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mvv6zgb6nq2u", "content": "Fortinet reports that CVE-2026-58138 in Orkes Conductor is being actively exploited in the wild without needing authentication. Why do we even bother securing the perimeter.\n\n#JustPatchIt #MoreRCEs", "creation_timestamp": "2026-09-19T17:21:20.221869Z"}, {"uuid": "84460261-4074-4e1b-a219-7170b6d27f64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mvv6zikqts2w", "content": "Here we go again with Fortinet bearing the grim news that Orkes Conductor users are being battered by an in-the-wild pre-auth remote code execution flaw. This delightfully terrifying bug, officially catalogued as CVE-2026-58138 with a nearly flawless 9.8 severity score, leaves th...\n\nRead full story", "creation_timestamp": "2026-09-19T17:21:22.350581Z"}, {"uuid": "78bcaa9e-098f-4d72-9ffb-a16e45529d32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvvh26prje2i", "content": "\ud83e\udd16 CVE-2026-58138 (CVSS 9.8): unauthenticated RCE in Orkes Conductor, actively exploited in the wild per Fortinet. Versions 3.21.21\u20133.30.1 affected, patch now.\nhttps://thehackernews.com/2026/09/critical-pre-auth-rce-in-orkes.html", "creation_timestamp": "2026-09-19T19:44:55.872132Z"}, {"uuid": "24f196fa-e0cd-4aca-8ec0-ec255e10ef57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44487", "content": "Critical Orkes Conductor Vulnerability Exploited in Attacks\n\nCVE-2026-58138 is an unauthenticated remote code execution vulnerability that attackers can exploit via inline workflow definitions.\nThe post Critical Orkes Conductor Vulnerability Exploited in Attacks appeared first on SecurityWeek.\nhttps://www.securityweek.com/critical-orkes-conductor-vulnerability-exploited-in-attacks/", "creation_timestamp": "2026-09-20T00:00:11.542023Z"}, {"uuid": "af098822-b001-4512-b1d6-3a300a988577", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44502", "content": "Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild\n\nA critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet.\n\nThe vulnerability in question is CVE-2026-58138 (CVSS v3.1 score: 9.8/CVSS v4 score: 9.3), which relates to a case of unauthenticated remote code execution.\n\n\"Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote\nhttps://thehackernews.com/2026/09/critical-pre-auth-rce-in-orkes.html", "creation_timestamp": "2026-09-20T01:00:04.695822Z"}, {"uuid": "a12604ec-1571-4983-8735-51f04b591ec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://thehackernews.com/2026/09/critical-pre-auth-rce-in-orkes.html", "content": "A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet.\n\nThe vulnerability in question is CVE-2026-58138 (CVSS v3.1 score: 9.8/CVSS v4 score: 9.3), which relates to a case of unauthenticated remote code execution.\n\n\"Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote", "creation_timestamp": "2026-09-20T01:00:35.244771Z"}, {"uuid": "ad0ab6d0-1034-4a3f-bdb0-c2807a0ab3ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://bsky.app/profile/theperimetersite.bsky.social/post/3mvwlfxutuo23", "content": "Orkes Conductor has a real mess on its hands right now, and CVE-2026-58138 is a pre-authentication remote code execution vulnerability (the kind of bug that makes security architects want to retire early).\n\n#vulnerability #infosec", "creation_timestamp": "2026-09-20T06:35:45.863740Z"}, {"uuid": "7916f462-e26c-4f14-a80f-6a9b81a6f4ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvwpucx62v26", "content": "\ud83e\udd16 CVE-2026-58138 (CVSS 9.8): pre-auth RCE in Orkes Conductor workflow platform, actively exploited in the wild. Affects 3.21.21 before 3.30.2. Patch immediately.\nhttps://thehackernews.com/2026/09/critical-pre-auth-rce-in-orkes.html", "creation_timestamp": "2026-09-20T07:55:22.264193Z"}, {"uuid": "18542a14-6db9-40e0-9860-013bd58c3772", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://t.me/pphm_HackerNews/3222", "content": "\ud83d\udd34 Critical Orkes Conductor Vulnerability Exploited in Attacks\n\nA critical-severity vulnerability in Orkes Conductor that can be exploited without authentication has been in attackers\u2019 crosshairs for at least a month.\n\nConductor is an open source unified enterprise framework that allows organizations to orchestrate microservices, workflows, and AI agents.\n\nTracked as CVE-2026-58138 (CVSS score of 9.8), the critical bug is described as a remote code execution issue exploitable via inline workflow definitions submitted to the workflow API endpoint.", "creation_timestamp": "2026-09-20T10:00:05.135605Z"}]}