CVE-2026-33557

A possible security vulnerability has been identified in Apache Kafka. By default, the broker property "sasl.oauthbearer.jwt.validator.class" is set to "org.apache.kafka.common.security.oauthbearer.DefaultJwtValidator". It accepts any JWT token without validating its signature, issuer, or audienc...