GHSA-XRHH-HX36-485Q Strimzi allows unrestricted access to all Secrets in the same Kubernetes namespace from Kafka Connect and MirrorMaker 2 operands

Impact In some situations, Strimzi creates an incorrect Kubernetes Role which grants the Apache Kafka Connect and Apache Kafka MirrorMaker 2 operands the GET access to all Kubernetes Secrets that exist in the given Kubernetes namespace. The exact scenario when this happens is when: Apache Kafka...

CVE-2025-66623

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. From 0.47.0 and prior to 0.49.1, in some situations, Strimzi creates an incorrect Kubernetes Role which grants the Apache Kafka Connect and Apache Kafka MirrorMaker 2 operands th...

CVE-2025-66623 Strimzi allows unrestricted access to all Secrets in the same Kubernetes namespace from Kafka Connect and MirrorMaker 2 operands

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. From 0.47.0 and prior to 0.49.1, in some situations, Strimzi creates an incorrect Kubernetes Role which grants the Apache Kafka Connect and Apache Kafka MirrorMaker 2 operands th...

CVE-2025-66623 Strimzi allows unrestricted access to all Secrets in the same Kubernetes namespace from Kafka Connect and MirrorMaker 2 operands

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. From 0.47.0 and prior to 0.49.1, in some situations, Strimzi creates an incorrect Kubernetes Role which grants the Apache Kafka Connect and Apache Kafka MirrorMaker 2 operands th...

CVE-2025-66623

Strimzi (Kafka on Kubernetes/OpenShift) has a vulnerability in versions 0.47.0–0.49.0 where an incorrect Kubernetes Role allows GET access to all Secrets in the target namespace for Kafka Connect and MirrorMaker 2 operands. The issue is fixed in Strimzi 0.49.1. Impact is restricted to unauthorize...

CVE-2025-66623 Strimzi allows unrestricted access to all Secrets in the same Kubernetes namespace from Kafka Connect and MirrorMaker 2 operands

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. From 0.47.0 and prior to 0.49.1, in some situations, Strimzi creates an incorrect Kubernetes Role which grants the Apache Kafka Connect and Apache Kafka MirrorMaker 2 operands th...

Strimzi 安全漏洞

Strimzi is a program from the Strimzi open source that allows running Apache Kafka clusters on Kubernetes in various deployment configurations. A security vulnerability exists in Strimzi versions 0.47.0 through prior to 0.49.1, which stems from the creation of incorrect Kubernetes roles and could...

PT-2025-49308

Name of the Vulnerable Software and Affected Versions Strimzi versions 0.47.0 through 0.49.0 Description Strimzi allows running an Apache Kafka cluster on Kubernetes or OpenShift. Versions from 0.47.0 up to 0.49.0 incorrectly create a Kubernetes Role. This role grants Apache Kafka Connect and...

Exploit for Server-Side Request Forgery in Apache Kafka

Apache Kafka 4.1.0 with Keycloak OAuth2 Authentication Produc...

CVE-2024-56128 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator...

GHSA-P7C9-8XX8-H74F vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator...

GHSA-P7C9-8XX8-H74F vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator...

CVE-2024-56128 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator...

CVE-2025-27817 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, zipkin, opensearch, apache-nifi, apicurio-registry, druid, thingsboard, wildfly, logstash...

GHSA-VGQ5-3255-V292 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, zipkin, opensearch, apache-nifi, apicurio-registry, druid, thingsboard, wildfly, logstash...

CVE-2025-27817 vulnerabilities

Vulnerabilities for packages: logstash, wildfly, opensearch, druid, zipkin, apache-nifi, thingsboard, apicurio-registry, strimzi-kafka-operator...

GHSA-VGQ5-3255-V292 vulnerabilities

Vulnerabilities for packages: logstash, wildfly, opensearch, druid, zipkin, apache-nifi, thingsboard, apicurio-registry, strimzi-kafka-operator...

GHSA-WXR5-93PH-8WR9 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, tez, opensearch, apache-nifi, apicurio-registry, jenkins-plugin-manager, confluent-common-docker, druid, jenkins, sonarqube, apache-activemq-artemis, spdx-tools-java, trino, akhq, celeborn, wildfly, cassandra-reaper...

CVE-2025-48734 vulnerabilities

Vulnerabilities for packages: druid, solr-fips, confluent-common-docker, ghidra, tez, spdx-tools-java, camunda-zeebe, akhq, solr, jenkins, hadoop-fips, cassandra-reaper, kafka, apache-activemq-artemis, jenkins-plugin-manager, confluent-kafka-jre-bcfips, hadoop-client-modules, sonarqube,...

CVE-2025-24970 vulnerabilities

Vulnerabilities for packages: zookeeper, cloudwatch-exporter, wavefront-proxy, logstash, druid, management-api-for-apache-cassandra-5.0, tez, knative-kafka-broker, kserve-modelmesh, thingsboard, flyway, akhq, selenium, cassandra-reaper, kafka, zookeeper-fips, apache-activemq-artemis, apache-pulsa...