Remote Code Execution (RCE)

Kafka clients is vulnerable to Remote Code Execution. The vulnerability is due to a lack of restrictions on the sasl.jaas.config authentication property, which allows an authenticated attacker to submit arbitrary SASL configurations. An attacker can inject a deserialization gadget chain into the configuration when there are available gadgets in the classpath, resulting in arbitrary code execution when a client connects to the attacker controlled LDAP server.