Skip to content
Threat Feed
Subscribe

Product

Kafka Connect (>= 4.3.0, < 4.3.2)

1 brief RSS
medium advisory

Apache Kafka: Configuration provider values exposed in Kafka Connect validation endpoint (CVE-2026-116593)

A vulnerability in the Kafka Connect configuration validation REST API allows an attacker to exfiltrate sensitive secrets intended to be resolved only at runtime.

Kafka Connect +1 webserver information-disclosure cve-2026-116593
1t 1c