org.apache.kafka:connect-runtime vulnerabilities

CVEs whose affected-version data names the org.apache.kafka:connect-runtime package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

2 CVEsRSS

CVE-2026-115644None

3d ago

Apache Kafka: Connect Admin REST API Authentication Bypass via Unapplied REST Extensions

Apache Kafka Connect contains an authentication bypass vulnerability affecting the admin REST API when admin.listeners is configured with a separate listener from the main listeners property. When operators isolate the admin REST API by…

▾ SunlitApache Software Foundation · org.apache.kafka:connect-runtimeEPSS 0.26%via CVEORG

CVE-2026-116593None

3d ago

Apache Kafka: Kafka Connect configuration provider values exposed via validation REST API endpoint

Apache Kafka Connect has the /connector-plugins/{connector-type}/config/validate endpoint on its REST API to validate connector configurations. Apache Kafka Connect also support Configuration Providers which enable to hide the values of …

▾ SunlitApache Software Foundation · org.apache.kafka:connect-runtimevia CVEORG