kafka-ui vulnerabilities

2 known vulnerabilities in kafka-ui from Provectus. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  kafka-ui: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-5562Apr 5, 2026ProvectusEPSS 2.58%

  A vulnerability was identified in provectus kafka-ui up to 0.7.2. This impacts the function validateAccess of the file /api/smartfilters/testexecutions of the component Endpoint. The manipulation leads to code injection. The attack can be initiated remotely. T

• 8.1 High severity

  kafka-ui: Improper Control of Generation of Code

  CVE-2024-32030Jun 19, 2024ProvectusEPSS 51.1%

  Kafka UI is an Open-Source Web UI for Apache Kafka Management. Kafka UI API allows users to connect to different Kafka brokers by specifying their network address and port. As a separate feature, it also provides the ability to monitor the performance of Kafka