Re: CVE-2026-82434: Apache Storm Nimbus, Apache Storm Client: Disclosure of the Topology ZooKeeper Credential to Read-Only Users and to Logs

As cited

Copy frozen at 2026-09-14 02:21 UTC (site build).

vulnerabilities

Re: CVE-2026-82434: Apache Storm Nimbus, Apache Storm Client: Disclosure of the Topology ZooKeeper Credential to Read-Only Users and to Logs

CVE-2026-82434 affects Apache Storm Nimbus and Apache Storm Client, exposing ZooKeeper credentials to read-only users and logs. The poster questions whether the vulnerability has an assigned severity rating.

Why it matters: Apache Storm operators should assess whether their ZooKeeper credentials may be accessible to read-only users and in logs, and determine if they can upgrade to a patched version.

Source published

2026-09-13 19:51 UTC

First seen by Cybersecurity Tracker

2026-09-14 01:52 UTC