cybercrime.clubhttps://cybercrime.club/tags/orchestration/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usMon, 06 Apr 2026 14:09:28 -0400CVE-2026-34612: Kestra SQL Injection Chains to Host RCE via PostgreSQL COPY TO PROGRAMhttps://cybercrime.club/posts/kestra-cve-2026-34612-sql-injection-to-host-rce/Mon, 06 Apr 2026 14:09:28 -0400https://cybercrime.club/posts/kestra-cve-2026-34612-sql-injection-to-host-rce/Critical CVSS 9.9 flaw in Kestra orchestration platform lets authenticated attackers chain SQL injection through PostgreSQL COPY TO PROGRAM for arbitrary command execution on the Docker host.vulnerabilities