Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security flaw has been discovered in PowerJob 5.1.0/5.1.1/5.1.2. The affected element is the function GroovyEvaluator.evaluate of the file /openApi/addWorkflowNode of the component OpenAPI Endpoint. The manipulation of the argument nodeParams results in code injection. The attack can be executed remotely. The project was informed of the problem early through an issue report but has not responded yet.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-5739 Remote Code Injection in PowerJob 5.1.0/5.1.2 OpenAPI Endpoint GroovyEvaluator https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5739
Post summary
A remote code injection vulnerability affecting PowerJob 5.1.0/5.1.2 through the OpenAPI GroovyEvaluator endpoint is identified as CVE-2026-5739.
CVE-2026-5739 A security flaw has been discovered in PowerJob 5.1.0/5.1.1/5.1.2. The affected element is the function GroovyEvaluator.evaluate of the file /openApi/addWorkflowNode of… https://www.cve.org/CVERecord?id=CVE-2026-5739
Post summary
A new vulnerability (CVE-2026-5739) has been identified in PowerJob 5.x, affecting the GroovyEvaluator.evaluate function, but no exploitation details, patches, or PoC are provided.