Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.3

Strimzi Kafka Operator may leak internal data

published 21 days ago
Summary

The Strimzi Kafka Operator package can unintentionally expose sensitive information about your Kafka deployment. This could allow an attacker to see details that should remain private, potentially aiding further attacks. Update the operator to the latest version or apply the vendor's recommended configuration changes to protect the data.

What to do
  • Update cleanstart strimzi-kafka-operator to version 1.2.0-r3.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart strimzi-kafka-operator < 1.2.0-r3
Fix: upgrade to 1.2.0-r3
Original advisory text
Information exposure vulnerability has been identified in Apache Kafka
Security vulnerability affects the strimzi-kafka-operator package. Information exposure vulnerability has been identified in Apache Kafka.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.3 Medium
Timeline
Published15 Oct 2026
Updated15 Oct 2026
First seen15 Oct 2026
Sources
CLEANSTART-2026-YH51539 · OSV
Track software like this
Free during beta