The vulnerability of the Kafka Connect BigQuery Connector lies in insufficient validation of requests on the server side. This allows attackers to disclose sensitive information or perform SSRF attacks.

The vulnerability of the Kafka Connect BigQuery Connector is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or perform an SSRF attack by sending a specially crafted malicious JSON file...

Kafka Connect BigQuery Connector code issues and vulnerabilities

Kafka Connect BigQuery Connector is a high-performance data synchronization middleware developed by Aiven Open. Versions of the connector prior to 2.11.0 contained code vulnerabilities. These vulnerabilities stemmed from the fact that the service did not validate the credentials from external...

CVE-2026-23529: External Control of File Name or Path

Kafka Connect BigQuery Connector is an implementation of a sink connector from Apache Kafka to Google BigQuery. Prior to 2.11.0, there is an arbitrary file read in Google BigQuery Sink connector. Aiven's Google BigQuery Kafka Connect Sink connector requires Google Cloud credential configurations...