Skip to content
OpenAdvisories

Package · Maven

org.conductoross:conductor-core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-26074

    Conductor vulnerable to OS command injection through unrestricted access to Java classes

    Orkes Conductor v3.21.11 allows remote attackers to execute arbitrary OS commands through unrestricted access to Java classes.

    org.conductoross:conductor-core Maven