Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
Strimzi Kafka Operator may allow remote code execution
published 21 days ago
Summary
The Strimzi Kafka Operator uses the Netty library, which contains a security weakness that could let an attacker run code on the system running the operator. This could compromise the Kafka cluster and any data it processes. Update to the latest version of the Strimzi Kafka Operator or apply the vendor’s recommended patches as soon as possible.
What to do
- Update cleanstart strimzi-kafka-operator to version 1.2.0-r3.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | strimzi-kafka-operator |
< 1.2.0-r3 Fix: upgrade to 1.2.0-r3
|
Original advisory text
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients
Security vulnerability affects the strimzi-kafka-operator package. Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published15 Oct 2026
Updated15 Oct 2026
First seen15 Oct 2026
Sources
CLEANSTART-2026-HT34208 · OSV
Track software like this
Free during beta