CVE-2026-112375 Apache Kafka: Unauthorized principal can read arbitrary broker files via IncrementalAlterConfigs

An authenticated Kafka principal with no authorization grants not even ALTERCONFIGS can make a broker read a file or an environment variable from the broker host and return its contents. An IncrementalAlterConfigs or AlterConfigs request targeting a BROKER resource reaches the broker's...

CVE-2026-112375

An authenticated Apache Kafka principal without authorization grants can force a broker to disclose the contents of files or environment variables from the host. This occurs because an IncrementalAlterConfigs (or AlterConfigs) request targeting a BROKER resource reaches configuration validation b...