<![CDATA[🔴 Critical: Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild]]>Orkes Conductor is affected by a critical pre-authentication remote code execution flaw that is now being exploited in the wild, according to Fortinet.

The vulnerability is tracked as CVE-2026-58138, with a CVSS v3.1 score of 9.8 and a CVSS v4 score of 9.3. It allows unauthenticated remote code execution, meaning an attacker can run arbitrary code without needing valid credentials.

  • Affected versions: Orkes Conductor 3.21.21 up to (but not including) 3.30.2
  • Fixed in: 3.30.2

Given active exploitation and the pre-auth nature of the flaw, the priority should be upgrading to 3.30.2 or later as soon as possible if you run an affected version. Until patching is complete, restricting network access to the Conductor interface and monitoring for unexpected process or command execution are reasonable interim measures.

Source: The Hacker News
Is your organization running an affected version of Orkes Conductor, and have you already applied the fix?

]]>https://xploitlk.com/topic/389/critical-critical-pre-auth-rce-in-orkes-conductor-workflow-platform-exploited-in-the-wildRSS for NodeTue, 27 Oct 2026 11:22:30 GMTSat, 19 Sep 2026 10:30:18 GMT60