CVE-2026-123270

Redpanda Connect versions 4.39 to 4.110 are vulnerable to unauthenticated remote code execution (RCE) due to a missing authentication gate on the management HTTP API exposed on 0.0.0.0:4195. An unauthenticated attacker with network access can POST a malicious pipeline definition to /streams/{id} ...

EUVD-2026-120155

Redpanda Connect versions 4.39 to 4.110 contain a missing authentication vulnerability that enables unauthenticated remote code execution RCE. In streams mode, the management HTTP API is exposed on 0.0.0.0:4195, but authentication is disabled by default and there is no authentication gate...

FreeBSD : redpanda-connect -- memory exhaustion via oversized AMQP frames (5d69ee28-adb9-11f1-9d0e-4c526214c986)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5d69ee28-adb9-11f1-9d0e-4c526214c986 advisory. amqp091-go developers report: Before version 1.13.0, a compromised or malicious AMQP broker can force t...

redpanda-connect -- memory exhaustion via oversized AMQP frames

amqp091-go developers report: Before version 1.13.0, a compromised or malicious AMQP broker can force the client to allocate resources for and process content body frames that exceed the negotiated framemax limit. This can lead to unexpected memory consumption or application-layer denial of servi...