CVE-2026-115644 Apache Kafka: Connect Admin REST API Authentication Bypass via Unapplied REST Extensions

Apache Kafka Connect contains an authentication bypass vulnerability affecting the admin REST API when admin.listeners is configured with a separate listener from the main listeners property. When operators isolate the admin REST API by explicitly configuring the "admin.listeners" property, REST...

CVE-2026-115644

Apache Kafka Connect contains an authentication bypass vulnerability in the admin REST API. When the admin.listeners property is configured as a separate listener from the main listeners property, REST extensions (e.g., BasicAuthSecurityRestExtension) specified via rest.extension.classes are not ...