rundeck vulnerabilities

CVEs per yearBy the year they were published

1. 20201
2. 20212
3. 20224
4. 20232
5. 20263

Newest CVEs

• CVE-2026-106056

  Rundeck before 6.2.0 OS Command Injection via Windows Job Option Quoting

  rundeck · rundeck

  High7.7
• CVE-2026-105834

  Rundeck before 6.2.0 Arbitrary File Read via File Resource Model Source

  rundeck · rundeck

  High7.1
• CVE-2026-92763

  Rundeck through 6.2.1 Authorization Bypass via Project Import

  rundeck · rundeck

  High8.6
• CVE-2023-47112

  Authenticated users can view job names and groups they do not have authorization to view in Rundeck

  rundeck · rundeck

  Medium4.3
• CVE-2023-48222

  Authenticated users can view or delete jobs they do not have authorization for in Rundeck

  rundeck · rundeck

  High8.1
• CVE-2022-31044

  Plaintext Storage of Keys and Passwords in Rundeck and PagerDuty Process Automation

  rundeck · rundeck

  High7.5
• CVE-2022-29186

  Use of Hard-coded Cryptographic Key in rundeck/rundeck, rundeckpro/enterprise

  rundeck · rundeck

  Critical9.1
• CVE-2021-41112

  Missing Authorization in Rundeck

  rundeck · rundeck

  High8.1
• CVE-2021-41111

  Authorization Bypass Through User-Controlled Key in Rundeck

  rundeck · rundeck

  Medium6.4
• CVE-2021-39133

  Cross-Site Request Forgery (CSRF) can run untrusted code on Rundeck server

  rundeck · rundeck

  High7.2