PT-2026-30993 · Powerjob · Powerjob

Anch0R · CVE-2026-5739 · Published 2026-04-07 · Updated 2026-04-08

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PowerJob versions 5.1.0 through 5.1.2

Description A security flaw exists in PowerJob versions 5.1.0 through 5.1.2. The issue is related to code injection resulting from the manipulation of the nodeParams argument within the GroovyEvaluator.evaluate function located in the /openApi/addWorkflowNode file of the OpenAPI Endpoint component. This attack can be executed remotely.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Fix

Special Elements Injection

Code Injection

Weakness Enumeration

CWE-74

CWE-94

Related Identifiers

CVE-2026-5739

GHSA-WPWF-V25W-54G3

Affected Products

Powerjob

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/5xxx/CVE-2026-5739.json · Exploit
• https://osv.dev/vulnerability/GHSA-wpwf-v25w-54g3 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-5739 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-5739 · Security Note
• https://github.com/PowerJob/PowerJob/issues/1168 · Note
• https://github.com/PowerJob/PowerJob · Note
• https://vuldb.com/vuln/355747/cti · Note
• https://twitter.com/VulmonFeeds/status/2041760366011560363 · Twitter Post
• https://vuldb.com/vuln/355747 · Note
• https://twitter.com/CVEnew/status/2041603143713120345 · Twitter Post
• https://vuldb.com/submit/786936 · Note