Critical Pre-Authentication Vulnerability in Orkes Conductor Actively Exploited

Fortinet has detected active exploitation of CVE-2026-58138, a critical vulnerability in the Orkes Conductor workflow orchestration platform. The flaw allows an unauthenticated remote attacker to execute code on vulnerable systems and is rated 9.8 under CVSS v3.1 and 9.3 under CVSS v4. Versions from 3.21.21 up to, but not including, 3.30.2 are affected, making it urgent to update exposed installations. Compromising a workflow platform can enable access to credentials, automated processes, integrations, and connected systems. The combination of no authentication being required, remote code execution, and attacks already observed makes this the most urgent operational threat in the briefing.

Source: The Hacker News