Unbounded Retry Handling Vulnerability in Splunk Connect for Kafka

CVE-2026-76400

What is CVE-2026-76400?

In Splunk Connect for Kafka prior to version 2.2.7, a vulnerability exists that allows unauthenticated users to exploit the Kafka Connect REST API. This exploit can lead to a scenario where delivery of events fails and the retry mechanism does not impose a limit on the number of retries. Consequently, this can result in event delivery being halted, which disrupts data ingestion workflows. Without a finite limit on retry attempts, the system remains vulnerable to an intentional or unintentional flood of requests that could degrade performance. For a detailed overview, check the Splunk documentation.

References