Apache Kafka Vulnerabilities

Apache Apache Kafka vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

10 June 2025

Arbitrary File Read and SSRF Vulnerability in Apache Kafka Client by Apache
CVE-2025-27817
ApacheApache Kafka Client👾🟡7.5HIGH
Remote Code Execution Vulnerability in Apache Kafka by Apache
CVE-2025-27819
ApacheApache Kafka7.5HIGH
Apache Kafka Version Vulnerability Allowing Arbitrary Configuration Modifications
CVE-2025-27818
ApacheApache Kafka8.8HIGH

9 April 2025

Sensitive Configuration Exposure in Apache Pulsar's Integration with Apache Kafka
CVE-2025-30677
ApacheApache Pulsar Io Kafka...6.3MEDIUM

19 November 2024

Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka Clients
CVE-2024-31141
ApacheApache Kafka Clients6.5MEDIUM

12 April 2024

Kafka Migration Bug Affects ACL Enforcement
CVE-2024-27309
ApacheApache Kafka7.4HIGH

7 February 2023

Apache Kafka Connect API: Possible RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration using Kafka Connect
CVE-2023-25194
ApacheApache Kafka Connect Api👾🟡EPSS 94%8.8HIGH

20 September 2022

Unauthenticated clients may cause OutOfMemoryError on Apache Kafka Brokers
CVE-2022-34917
ApacheApache Kafka7.5HIGH

22 September 2021

Timing Attack Vulnerability for Apache Kafka Connect and Clients
CVE-2021-38153
ApacheApache Kafka5.9MEDIUM

26 July 2018