CVE-2026-58138: Orkes Conductor 3.21.21 < 3.30.2 Unauthenticated RCE via GraalVM Script Evaluators

Synopsis

An unauthenticated remote code execution vulnerability exists in Orkes Conductor versions 3.21.21 through 3.30.2, caused by unsandboxed GraalVM script evaluators that process attacker-supplied JavaScript or Python expressions. The vulnerability is reachable over the network with no authentication required, allowing any remote attacker to reach the workflow API endpoint and submit malicious inline task definitions. Successful exploitation gives the attacker arbitrary OS command execution on the host running Conductor. A patched-image rebuild at version 3.30.2 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The vulnerable workflow API endpoint is exposed over the network, so an attacker must be able to send HTTP requests to the Conductor service from a remote host.

• AuthenticationNot required

  No account or credential of any privilege level is needed; the vulnerable endpoint accepts and evaluates inline workflow definitions before any authentication check.

• Victim interactionNot required

  The attack is entirely server-side; no user action such as clicking a link or opening a file is involved.

• Attack complexityDetail

  Exploitation is reliable and condition-free; the attacker simply submits a crafted payload to a publicly reachable API endpoint with no race conditions or environmental dependencies to satisfy.

Blast Radius

• Attacker executes arbitrary OS commands on the Conductor host, gaining full control over the process and its runtime environment.
• Attacker reads secrets, configuration files, and credentials stored on the host or mounted into the container, including any cloud provider tokens or database passwords accessible to the Conductor process.
• Attacker modifies or deletes workflow state, task queues, and persisted job data managed by the Conductor instance.
• Attacker crashes or disables the Conductor service entirely, halting all workflow orchestration for dependent applications.