PT-2026-140928

Name of the Vulnerable Software and Affected Versions Redpanda Connect versions 4.39 through 4.110 Description In streams mode, the management HTTP API is exposed on 0.0.0.0:4195 without authentication enabled by default, leaving stream CRUD routes unprotected. An unauthenticated attacker with...

redpanda-connect-unauth-rce

Redpanda Connect: Unauthenticated Streams-Mode RCE CVE-2026-1...