Kafka vulnerabilities

7 known vulnerabilities in Kafka from Apache. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  Apache Kafka: Improper Validation of Specified Index, Position, or Offset in Input

  CVE-2026-33557Apr 20, 2026Apache

  A possible security vulnerability has been identified in Apache Kafka. By default, the broker property `sasl.oauthbearer.jwt.validator.class` is set to `org.apache.kafka.common.security.oauthbearer.DefaultJwtValidator`. It accepts any JWT token without validat

• 8.7 High severity

  Apache Kafka Clients: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-35554Apr 7, 2026Apache

  A race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics. When a produce batch expires due to delivery.timeout.ms while a network request containing that batch is still i

• 7.5 High severity

  Apache Kafka: Deserialization of Untrusted Data

  CVE-2025-27819Jun 10, 2025ApacheEPSS 1.11%

  In CVE-2023-25194, we announced the RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration in Kafka Connect API. But not only Kafka Connect API is vulnerable to this attack, the Apache Kafka brokers also have this vulnerability. To exploit th

• 8.8 High severity

  Apache Kafka: Deserialization of Untrusted Data

  CVE-2025-27818Jun 10, 2025ApacheEPSS 1.15%

  A possible security vulnerability has been identified in Apache Kafka. This requires access to a alterConfig to the cluster resource, or Kafka Connect worker, and the ability to create/modify connectors on it with an arbitrary Kafka client SASL JAAS config and

• 7.5 High severity

  Apache Kafka Client: Server-Side Request Forgery

  CVE-2025-27817Jun 10, 2025ApacheEPSS 69.8%

  A possible arbitrary file read and SSRF vulnerability has been identified in Apache Kafka Client. Apache Kafka Clients accept configuration data for setting the SASL/OAUTHBEARER connection with the brokers, including "sasl.oauthbearer.token.endpoint.url" and "

• 7.4 High severity

  Apache Kafka: Incorrect Authorization

  CVE-2024-27309Apr 12, 2024ApacheEPSS 1.11%

  While an Apache Kafka cluster is being migrated from ZooKeeper mode to KRaft mode, in some cases ACLs will not be correctly enforced. Two preconditions are needed to trigger the bug: 1. The administrator decides to remove an ACL 2. The resource associated with

• 7.5 High severity

  Apache Kafka: Allocation of Resources Without Limits or Throttling

  CVE-2022-34917Sep 20, 2022ApacheEPSS 1.58%

  A security vulnerability has been identified in Apache Kafka. It affects all releases since 2.8.0. The vulnerability allows malicious unauthenticated clients to allocate large amounts of memory on brokers. This can lead to brokers hitting OutOfMemoryException