CYBERSECURITYTRACKER
Permanent story citation

CVE-2026-115644: Apache Kafka: Connect Admin REST API Authentication Bypass via Unapplied REST Extensions

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11673

As cited

Copy frozen at (site build).

vulnerabilities

CVE-2026-115644: Apache Kafka: Connect Admin REST API Authentication Bypass via Unapplied REST Extensions

Apache Kafka Connect contains an authentication bypass vulnerability in the admin REST application programming interface (API) when the admin.listeners property is configured separately from the main listeners property. The flaw affects versions 2.4.0 through 4.2.2 and 4.3.0 through 4.3.2. The issue occurs when operators isolate the admin REST API through explicit configuration of the admin.listeners setting.

Why it matters: Operators running affected Kafka Connect versions with a separate admin listener face unauthorized access to the admin application programming interface (API), requiring immediate patching to versions 4.2.2 or 4.3.2 or later.

CVEsCVE-2026-115644
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary

Open in glossary