Identity security and access management firm CyberArk has patched several serious vulnerabilities that could lead to unauthenticated remote code execution, potentially enabling threat actors to gain access to valuable enterprise secrets. The vulnerabilities were found by researchers at agentic identity security firm Cyata in CyberArk Conjur, an open source secrets management solution that is used by many organizations for managing machine and AI identities and for brokering secure access between various enterprise environments. Conjur is designed for securely storing, managing and controlling access to credentials, certificates, API keys and other enterprise secrets used in cloud and DevOps environments, which could be highly valuable to threat actors. Cyata discovered a series of…