As cited
Copy frozen at (site build).
vulnerabilities
Re: CVE-2026-82434: Apache Storm Nimbus, Apache Storm Client: Disclosure of the Topology ZooKeeper Credential to Read-Only Users and to Logs
CVE-2026-82434 affects Apache Storm Nimbus and Apache Storm Client, exposing ZooKeeper credentials to read-only users and logs. The poster questions whether the vulnerability has an assigned severity rating.
Why it matters: Apache Storm operators should assess whether their ZooKeeper credentials may be accessible to read-only users and in logs, and determine if they can upgrade to a patched version.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Re: CVE-2026-82434: Apache Storm Nimbus, Apache Storm Client: Disclosure of the Topology ZooKeeper Credential to Read-Only Users and to Logs
CVE-2026-82434 affects Apache Storm Nimbus and Client, exposing ZooKeeper credentials to read-only users and logs. A researcher flagged uncertainty about the vulnerability's severity classification on September 13, 2026.
Why it matters: Apache Storm operators should assess whether read-only user access or log exposure to ZooKeeper credentials poses a risk in their deployments and apply fixes from the vendor advisory.
- Source published
- First seen by Cybersecurity Tracker