Warning: Orkes Conductor Remote Code Execution Vulnerability, Patch Immediately!

**CVE-2026-58138 — Critical RCE in Orkes Conductor:** Orkes Conductor versions 3.21.21 through 3.30.1 contain a code-injection vulnerability in INLINE, LAMBDA, DO_WHILE and SWITCH task types due to GraalVM script evaluators configured with unrestricted host access; an unauthenticated attacker can execute arbitrary OS commands by submitting malicious workflow expressions. Active exploitation attempts were reported; the issue is fixed in 3.30.2 (3.30.0/3.30.1 include partial mitigations). Immediate actions: prioritize patching to 3.30.2, restrict access to workflow API endpoints, and review logs for suspicious workflow creations, spawned processes, and credential access.