Skip to main content
Question

Rundeck Vulnerability reported - CVE-2026-22732

  • May 5, 2026
  • 1 reply
  • 8 views

Hi all, quick vulnerability question.

Our vulnerability software has flagged up Rundeck v5.20 with CVE-2026-22732 because of the component spring-security-web-5.8.15.jar 

I could not find anything about this CVE in this forum or Rundeck web page.

How can we find out if there’s a fix for this coming up soon?

Is there a place to report this?

Thanks!

1 reply

Forum|alt.badge.img
  • PagerDuty Team 📟
  • May 5, 2026

Hi ​@Carlos.A  I've reported this to the engineering team. Thanks a lot for your feedback!