CVE-2026-112375

A flaw was found in Apache Kafka. Broker configuration update requests are validated before authorization checks are performed, allowing arbitrary configuration providers to resolve variables and bypass security controls. An authenticated user without authorization privileges can exploit this fla...