128 matches found
CVE-2026-55226
CVE-2026-55226 is a least-privilege violation in Strimzi (the Apache Kafka operator for Kubernetes/OpenShift), affecting versions 1.0.0 and earlier . When only the Topic Operator or only the User Operator is deployed via the Kafka custom resource, the Entity Operator ServiceAccount retains RBAC p...
CVE-2026-55226 Strimzi: Unrestricted access to all Secrets within namespace watched by the Topic operator
Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In Strimzi 1.0.0 and earlier, deploying only the Topic Operator or only the User Operator through the Kafka custom resource leaves the Entity Operator ServiceAccount with RBAC...
CVE-2026-55225: Improper Privilege Management
Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In Strimzi 1.0.0 and earlier, an attacker who can create a Kafka custom resource can set Kafka.spec.entityOperator watchedNamespace to a target namespace, causing the Cluster...
CVE-2026-55226: Improper Privilege Management
Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In Strimzi 1.0.0 and earlier, deploying only the Topic Operator or only the User Operator through the Kafka custom resource leaves the Entity Operator ServiceAccount with RBAC...
CLEANSTART-2026-LI34904 Security fixes in strimzi-kafka-operator 1.2.0-r1
Package strimzi-kafka-operator version 1.2.0-r1 fixes 2 vulnerabilities: CVE-2026-59949, CVE-2026-59903...
CLEANSTART-2026-AH40201 Security fixes in strimzi-kafka-operator 1.2.0-r2
Package strimzi-kafka-operator version 1.2.0-r2 fixes 1 vulnerabilities: CVE-2025-12183...
CLEANSTART-2026-OY69138 Security fixes in strimzi-kafka-operator 1.2.0-r3
Package strimzi-kafka-operator version 1.2.0-r3 fixes 1 vulnerabilities: CVE-2025-12183...
CLEANSTART-2026-KB74242 Security fixes in strimzi-kafka-operator 1.1.0-r1
Package strimzi-kafka-operator version 1.1.0-r1 fixes 22 vulnerabilities: CVE-2026-42587, CVE-2026-47244, CVE-2026-48043, CVE-2026-50560, CVE-2026-54512...
CLEANSTART-2026-VJ08145 Security fixes in strimzi-kafka-operator 1.1.0-r2
Package strimzi-kafka-operator version 1.1.0-r2 fixes 25 vulnerabilities: CVE-2026-55831, CVE-2026-55833, CVE-2026-56745, CVE-2026-56746, CVE-2026-59898...
strimzi-cluster-operator: Cross-namespace privilege escalation via Kafka.spec.entityOperator.watchedNamespace in Strimzi
When the Strimzi cluster operator is deployed with watchAnyNamespace=true or a multi-namespace list, any namespace editor can set Kafka.spec.entityOperator.userOperator.watchedNamespace or topicOperator.watchedNamespace to an arbitrary namespace. The cluster operator then creates a Role granting...
CLEANSTART-2026-WT05389 Security fixes in strimzi-kafka-operator 0.50.1-r0
Package strimzi-kafka-operator version 0.50.1-r0 fixes 3 vulnerabilities: ghsa-72hv-8253-57qq, CVE-2025-11143, CVE-2026-1605...
CLEANSTART-2026-FP77984 Security fixes in strimzi-kafka-operator 0.46.1-r3
Package strimzi-kafka-operator version 0.46.1-r3 fixes 10 vulnerabilities: CVE-2025-11143, CVE-2025-53864, CVE-2025-55163, CVE-2025-58056, CVE-2025-58057...
CLEANSTART-2026-ZE95752 Security fixes in strimzi-kafka-operator 0.50.0-r0
Package strimzi-kafka-operator version 0.50.0-r0 fixes 1 vulnerabilities: ghsa-cphf-4846-3xx9...
CLEANSTART-2026-ZV34704 Security fixes in strimzi-kafka-operator 0.47.0-r3
Package strimzi-kafka-operator version 0.47.0-r3 fixes 1 vulnerabilities: CVE-2025-58057...
CLEANSTART-2026-XN43320 Security fixes in strimzi-kafka-operator 0.51.0-r1
Package strimzi-kafka-operator version 0.51.0-r1 fixes 11 vulnerabilities: CVE-2026-2332, CVE-2026-33871, CVE-2026-34477, CVE-2026-34478, CVE-2026-34480...
CLEANSTART-2026-BL34124 Security fixes in strimzi-kafka-operator 0.46.1-r4
Package strimzi-kafka-operator version 0.46.1-r4 fixes 1 vulnerabilities: CVE-2025-58057...
CVE-2026-56816 vulnerabilities
Vulnerabilities for packages: spark, apache-hop, strimzi-kafka-operator, camunda-zeebe, camunda, apache-hop-fips, strimzi-kafka-operator-fips, opensearch-fips, spark-fips, opensearch, celeborn...
GHSA-HPCC-26XQ-25FV vulnerabilities
Vulnerabilities for packages: spark, apache-hop, strimzi-kafka-operator, camunda-zeebe, camunda, apache-hop-fips, strimzi-kafka-operator-fips, opensearch-fips, spark-fips, opensearch, celeborn...
