10
Node
[
{
"defaultStatus": "unaffected",
"product": "Apache Kafka Connect API",
"vendor": "Apache Software Foundation",
"versions": [
{
"lessThan": "3.4.0",
"status": "affected",
"version": "2.3.0",
"versionType": "semver"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| producer.override.sasl.jaas.config | request body | /connectors | Kafka Connect REST API allows setting SASL JAAS config for connectors; if an operator can set com.sun.security.auth.module.JndiLoginModule via these properties, the server may deserialize LDAP responses leading to Java deserialization gadget chains or RCE. | CWE-502 |
| consumer.override.sasl.jaas.config | request body | /connectors | Kafka Connect REST API allows setting SASL JAAS config for connectors; if an operator can set com.sun.security.auth.module.JndiLoginModule via these properties, the server may deserialize LDAP responses leading to Java deserialization gadget chains or RCE. | CWE-502 |
| admin.override.sasl.jaas.config | request body | /connectors | Kafka Connect REST API allows setting SASL JAAS config for connectors; if an operator can set com.sun.security.auth.module.JndiLoginModule via these properties, the server may deserialize LDAP responses leading to Java deserialization gadget chains or RCE. | CWE-502 |
| sasl.jaas.config | request body | /connectors | Kafka Connect REST API allows setting SASL JAAS config for connectors; if an operator can set com.sun.security.auth.module.JndiLoginModule via these properties, the server may deserialize LDAP responses leading to Java deserialization gadget chains or RCE. | CWE-502 |
| sasl.jaas.config | request body | /druid/indexer/v1/sampler | Druid/Kafka integration vulnerability using JNDI injection via sasl.jaas.config in Kafka client properties to trigger LDAP/JNDI-based deserialization leading to code execution; exploited via POST to the Druid sampler endpoint with for=connect. | CWE-502 |
| bootstrap.servers | request body | /druid/indexer/v1/sampler | Druid/Kafka integration vulnerability using JNDI injection via sasl.jaas.config in Kafka client properties to trigger LDAP/JNDI-based deserialization leading to code execution; exploited via POST to the Druid sampler endpoint with for=connect. | CWE-502 |
| security.protocol | request body | /druid/indexer/v1/sampler | Druid/Kafka integration vulnerability using JNDI injection via sasl.jaas.config in Kafka client properties to trigger LDAP/JNDI-based deserialization leading to code execution; exploited via POST to the Druid sampler endpoint with for=connect. | CWE-502 |
| sasl.mechanism | request body | /druid/indexer/v1/sampler | Druid/Kafka integration vulnerability using JNDI injection via sasl.jaas.config in Kafka client properties to trigger LDAP/JNDI-based deserialization leading to code execution; exploited via POST to the Druid sampler endpoint with for=connect. | CWE-502 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 05:40Current
8.8High risk
Vulners AI Score8.8
CVSS 3.18.8
EPSS0.9581
SSVC