CVE-2026-123270

Redpanda Connect versions 4.39 to 4.110 are vulnerable to unauthenticated remote code execution (RCE) due to a missing authentication gate on the management HTTP API exposed on 0.0.0.0:4195. An unauthenticated attacker with network access can POST a malicious pipeline definition to /streams/{id} ...