rundeck

Products

Exploited and recent CVEs

• CVE-2026-106056 High 7.5 Rundeck before 6.2.0 OS Command Injection via Windows Job Option Quoting 1.2%
• CVE-2026-105834 Medium 6.5 Rundeck before 6.2.0 Arbitrary File Read via File Resource Model Source 0.4%
• CVE-2026-92763 High 8.1 Rundeck through 6.2.1 Authorization Bypass via Project Import 0.6%
• CVE-2023-47112 Medium 4.3 Authenticated users can view job names and groups they do not have authorization to view in Rundeck 0.5%
• CVE-2023-48222 High 8.1 Authenticated users can view or delete jobs they do not have authorization for in Rundeck 0.4%
• CVE-2022-31044 High 7.5 Plaintext Storage of Keys and Passwords in Rundeck and PagerDuty Process Automation 0.7%
• CVE-2022-29186 Critical 9.1 Use of Hard-coded Cryptographic Key in rundeck/rundeck, rundeckpro/enterprise 1.2%
• CVE-2021-41112 High 8.1 Missing Authorization in Rundeck 0.7%
• CVE-2021-41111 Medium 6.4 Authorization Bypass Through User-Controlled Key in Rundeck 0.6%
• CVE-2021-39133 High 7.2 Cross-Site Request Forgery (CSRF) can run untrusted code on Rundeck server 0.5%
• CVE-2021-39132 High 8.8 YAML deserialization can run untrusted code 1.7%
• CVE-2020-11009 Medium 6.5 IDOR can reveal execution data and logs to unauthorized user in Rundeck 1.4%