CVE-2026-45080 Klaw: Improper Access Control Allows Disclosure of Password Hash

Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to version 2.10.4, improper access control allows disclosure of password hash. This issue has been patched in version 2.10.4...

CVE-2026-25999

Klaw (self-service Apache Kafka Topic Management/Governance tool) contains an improper access control vulnerability prior to v2.10.2 that allows an unauthorized user to trigger a reset or deletion of metadata for any tenant by calling the /resetMemoryCache endpoint. The CVE notes the impact as hi...

CVE-2026-25999 Klaw has an improper authorisation check on /resetMemoryCache

Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to 2.10.2, there is an improper access control vulnerability that allows unauthorized users to trigger a reset or deletion of metadata for any tenant. By sending a crafted request to the /resetMemoryCache endpoint,...