https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T15:15:44.788765+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-67650 cnvd-2021-67650 2026-10-07T15:15:44.872334+00:00 cnvd-2021-67650 https://cve.radiocsirt.org/vuln/euvd-2026-30431 EUVD-2026-30431 2026-10-07T15:15:44.872381+00:00 EUVD-2026-30431 https://cve.radiocsirt.org/vuln/fkie_cve-2021-39133 fkie_cve-2021-39133 2026-10-07T15:15:44.872396+00:00

Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Prior to version 3.3.14 and version 3.4.3, a user with `admin` access to the `system` resource type is potentially vulnerable to a CSRF attack that could cause the server to run untrusted code on all Rundeck editions. Patches are available in Rundeck versions 3.4.3 and 3.3.14.

 https://cve.radiocsirt.org/vuln/ghsa-3jmw-c69h-426c GHSA-3jmw-c69h-426c — Cross-Site Request Forgery (CSRF) can run untrusted code on Rundeck server 2026-10-07T15:15:44.872431+00:00

Affected: Maven: org.rundeck:rundeck-core

### Impact

A user with `admin` access to the `system` resource type is potentially vulnerable to a CSRF attack that could cause the server to run untrusted code on all Rundeck editions.

### Patches Available in Rundeck 3.4.3 and 3.3.14

### Workarounds

Please visit [https://rundeck.com/security](https://rundeck.com/security) for information about specific workarounds.

### For more information If you have any questions or comments about this advisory: * Email us at [security@rundeck.com](mailto:security@rundeck.com)

To report security issues to Rundeck please use the form at [https://rundeck.com/security](https://rundeck.com/security)

 https://cve.radiocsirt.org/vuln/gsd-2021-39133 gsd-2021-39133 2026-10-07T15:15:44.872464+00:00 gsd-2021-39133