CRITICAL PRE-AUTH RCE IN ORKES CONDUCTOR WORKFLOW PLATFORM EXPLOITED IN THE WILD

Summary from the TLDR InfoSec newsletter

Attackers are actively exploiting a critical pre-auth RCE (CVE-2026-58138) in Orkes Conductor by escaping unsandboxed GraalVM evaluators to execute arbitrary OS commands, requiring an immediate upgrade to version 3.30.2.