# CVE-2026-45807: Kestra path traversal via URL-encoded characters in API endpoints

Source: https://junglewise.ai/threats/cve-2026-45807-kestra-path-traversal-via-url-encoded-characters-in-api-endpoints  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-26. Updated: 2026-06-26  
License: CC BY 4.0 with a link back

CVE-2026-45807 · Severity: high · CVSS 7.7 · Published 2026-06-26

Kestra is an open-source platform used to orchestrate complex data workflows and event-driven tasks. A security flaw in how the system handles file paths allows an authenticated user to bypass security checks and read sensitive files from the underlying server. This could result in the exposure of system configuration files, passwords, or data belonging to other users on the same platform.

Technologies: [Kestra](https://junglewise.ai/threats/technologies/kestra). Vendors: [Kestra](https://junglewise.ai/threats/vendors/kestra).

## Quick answers

**Is CVE-2026-45807 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-45807 being exploited in the wild.

**How severe is CVE-2026-45807?** High severity, with a CVSS score of 7.7, published 26 June 2026.

**Which products and versions are affected?** Kestra < 1.0.43, >= 1.1.0 < 1.3.19.

**Is there a fix for CVE-2026-45807?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-45807 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-45807?** Check whether you run Kestra at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A path traversal vulnerability exists in Kestra's `StorageInterface.parentTraversalGuard` due to improper validation of URL-encoded sequences. The guard checks the literal `URI.toString()` for '..' segments, which can be bypassed using encoded strings like `%2E%2E`. Downstream, `URI.getPath()` decodes these sequences back into '..', and the resulting path is passed to `Paths.get()` without normalization. An authenticated attacker with `EXECUTION:READ` permissions can exploit this via multiple API endpoints (e.g., `ExecutionController` and `NamespaceFileController`) to read any file accessible to the Kestra process, such as `/etc/passwd` or secrets. The issue is fixed in versions 1.0.43 and 1.3.19.

## Affected products

- kestra-io kestra-core < 1.0.43, >= 1.1.0 < 1.3.19

## Timeline

- 2026-05-27: advisory: GitHub Security Advisory published by vendor
- 2026-06-26: disclosed: NVD publication date

## References

- [https://github.com/kestra-io/kestra/security/advisories/GHSA-3529-p4wf-xp79](https://github.com/kestra-io/kestra/security/advisories/GHSA-3529-p4wf-xp79)

## Related threats

- [Kestra stored XSS via custom Markdown link attribute injection](https://junglewise.ai/threats/cve-2026-55839-kestra-stored-xss-via-custom-markdown-link-attribute-injection)
- [Kestra Server-Side Request Forgery via Pebble http() function](https://junglewise.ai/threats/cve-2026-73247-kestra-server-side-request-forgery-via-pebble-http-function)
- [Kestra unauthenticated worker endpoint exposes task credentials](https://junglewise.ai/threats/cve-2026-73246-kestra-unauthenticated-worker-endpoint-exposes-task-credentials)
- [Kestra unauthenticated management endpoints on port 8081](https://junglewise.ai/threats/cve-2026-73245-kestra-unauthenticated-management-endpoints-on-port-8081)
- [Kestra OSS weak password hashing in BasicAuth component](https://junglewise.ai/threats/cve-2026-55069-kestra-oss-weak-password-hashing-in-basicauth-component)