Skip to content
Threat Feed
Subscribe

Product

Kafka (2.8.0 <= Version < 4.2.2)

1 brief RSS
high advisory

Apache Kafka: Unauthorized arbitrary file and environment variable read (CVE-2026-112375)

An authenticated principal in Apache Kafka can leverage crafted IncrementalAlterConfigs or AlterConfigs requests to perform arbitrary file and environment variable reads from the broker host.

Kafka +6 denial-of-service vulnerability backend cve-2026-83525
4t 3c