Rundeck vulnerabilities

Products

• Rundeck 12

Newest

• rundeck Rundeck before 6.2.0 OS Command Injection via Windows Job Option Quoting CVE-2026-106056 7.7 HighOctober 7, 2026
• rundeck Rundeck before 6.2.0 Arbitrary File Read via File Resource Model Source CVE-2026-105834 7.1 HighOctober 6, 2026
• rundeck Rundeck through 6.2.1 Authorization Bypass via Project Import CVE-2026-92763 8.6 HighSeptember 16, 2026
• pagerduty rundeck Authenticated users can view or delete jobs they do not have authorization for in Rundeck CVE-2023-48222 Fix available 8.1 HighNovember 16, 2023
• pagerduty rundeck Authenticated users can view job names and groups they do not have authorization to view in Rundeck CVE-2023-47112 Fix available 4.3 MediumNovember 16, 2023
• pagerduty rundeck Plaintext Storage of Keys and Passwords in Rundeck and PagerDuty Process Automation CVE-2022-31044 Fix available 7.5 HighJune 15, 2022
• pagerduty rundeck Use of Hard-coded Cryptographic Key in rundeck/rundeck, rundeckpro/enterprise CVE-2022-29186 9.1 CriticalMay 20, 2022
• pagerduty rundeck Missing Authorization in Rundeck CVE-2021-41112 8.1 HighFebruary 28, 2022
• pagerduty rundeck Authorization Bypass Through User-Controlled Key in Rundeck CVE-2021-41111 6.4 MediumFebruary 28, 2022
• pagerduty rundeck Cross-Site Request Forgery (CSRF) can run untrusted code on Rundeck server CVE-2021-39133 Fix available 7.2 HighAugust 30, 2021
• pagerduty rundeck YAML deserialization can run untrusted code CVE-2021-39132 Fix available 8.8 HighAugust 30, 2021
• pagerduty rundeck IDOR can reveal execution data and logs to unauthorized user in Rundeck CVE-2020-11009 Fix available 6.5 MediumApril 29, 2020