Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-26074
9.8
CRITICALCVSS v3
Published
June 30, 2025
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Orkes Conductor v3.21.11 allows remote attackers to execute arbitrary OS commands through unrestricted access to Java classes.
conductor-oss/conductor
GitHubConductor is an event driven agentic workflow engine providing durable and highly resilient execution engine for applications and AI Agents
GitHubConductor is an event driven agentic workflow engine providing durable and highly resilient execution engine for applications and AI AgentsNVD