CVE-2026-105933

In Apache Pulsar , a vulnerability exists where the encryption_required namespace policy is not enforced if a failure occurs during topic initialization (e.g., errors reading from the metadata store). Instead of failing the load, the broker logs a warning and proceeds by disabling the encryption ...