CVE-2026-112375 Apache Kafka: Unauthorized principal can read arbitrary broker files via IncrementalAlterConfigs

An authenticated Kafka principal with no authorization grants not even ALTERCONFIGS can make a broker read a file or an environment variable from the broker host and return its contents. An IncrementalAlterConfigs or AlterConfigs request targeting a BROKER resource reaches the broker's...

CVE-2026-112375

An authenticated Apache Kafka principal without authorization grants can force a broker to disclose the contents of files or environment variables from the host. This occurs because an IncrementalAlterConfigs (or AlterConfigs) request targeting a BROKER resource reaches configuration validation b...

EUVD-2026-9839

An unsafe parsing of OpenMQ's configuration, allows a remote attacker to read arbitrary files from a MQ Broker's server. A full exploitation could read unauthorized files of the OpenMQ’s host OS. In some scenarios RCE could be achieved...