CVE-2026-75430

PowerJob Worker version 5.1.2 (and likely earlier versions) exposes the /worker/deployContainer HTTP endpoint without authentication (CWE-306: Missing Authentication for Critical Function) on the worker's default transport port. Any remote attacker who can reach that port over the network can invoke the endpoint to trigger container deployment and execute arbitrary code with the privileges of the worker process; the flaw is network-exploitable with no privileges or user interaction required, earning a Critical CVSS 3.1 score of 9.8. Organizations running an affected PowerJob Worker whose default transport port is reachable from an untrusted network - for example exposed directly to the internet or accessible across shared network segments - are affected. As of now there is no known public proof-of-concept, the vulnerability is not listed in CISA KEV, and EPSS estimates only a 0.9% probability of exploitation within 30 days, indicating no confirmed exploitation activity.

What to do: No fixed version is specified in the available data, so check the PowerJob project for a patched release and upgrade as soon as one becomes available. In the meantime, restrict network access to the worker's default transport port via firewall rules or cloud security groups so only trusted hosts can reach it, confirm whether the port is reachable from the internet or other untrusted segments, and consider disabling the container deployment feature if it is not required.