Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild
Fortinet confirms active exploitation of CVE-2026-58138 (CVSS 9.8), a pre-auth RCE in Orkes Conductor that could give attackers a foothold deep inside microservice orchestration layers — patch or isolate immediately.
Summary written by editorial AI · Source link below
A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet.
The vulnerability in question is CVE-2026-58138 (CVSS v3.1 score: 9.8/CVSS v4 score: 9.3), which relates to a case of unauthenticated remote code execution.
"Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote
Editorial Analysis
Workflow orchestration platforms sit at the heart of microservice architectures; active exploitation of a CVSS-9.8 flaw there can cascade into broad infrastructure compromise.
Immediately patch Orkes Conductor to a fixed version, or isolate exposed instances behind WAF rules blocking the exploit vector until patching is feasible.
A critical, actively exploited vulnerability in a widely used workflow orchestration platform requires immediate patching to prevent deep infrastructure compromise.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at THN (Feedburner) in a new tab.
More from the Vulnerabilities Desk
- Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers1d
- Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software2d
- Abandoned Popcorn Time app exposed millions of devices to RCE attacks3d
- HPE patches eight max severity RCE and auth bypass AOS flaws3d
- Compromised TLS Certificates3d