Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Apache Kafka Connect could be exploited remotely
published 3 months ago
Summary
The Apache Kafka Connect component and related Kafka examples may be vulnerable to a security issue. Updating to the TuxCare‑provided version 3.2.3.tuxcare removes the risk. Apply the update as soon as possible to keep your data pipelines safe.
What to do
- Update apache org.apache.kafka:kafka-streams-examples to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:connect to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:connect-mirror to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-examples to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-streams to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:connect-mirror-client to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-metadata to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-streams-test-utils to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-storage to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:connect-basic-auth-extension to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:connect-runtime to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-raft to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-streams-scala_2.12 to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-streams-upgrade-system-tests-0100 to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:connect-json to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-streams-scala_2.13 to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-clients to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:connect-file to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:connect-api to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-log4j-appender to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-storage-api to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:generator to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-server-common to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-tools to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-streams-upgrade-system-tests-28 to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-streams-upgrade-system-tests-0110 to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-streams-upgrade-system-tests-22 to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:streams-quickstart-java to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-streams-upgrade-system-tests-10 to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-streams-upgrade-system-tests-11 to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-streams-upgrade-system-tests-0102 to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-streams-upgrade-system-tests-24 to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-streams-upgrade-system-tests-31 to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-streams-upgrade-system-tests-20 to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka_2.13 to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka_2.12 to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-streams-upgrade-system-tests-26 to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-streams-upgrade-system-tests-23 to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-streams-upgrade-system-tests-21 to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-streams-upgrade-system-tests-30 to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:trogdor to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-streams-upgrade-system-tests-25 to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:streams-quickstart to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-shell to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-streams-upgrade-system-tests-0101 to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:kafka-streams-upgrade-system-tests-27 to version 3.2.3.tuxcare.
- Update apache org.apache.kafka:connect-transforms to version 3.2.3.tuxcare.
- Update org.apache.kafka:connect to version 3.2.3.tuxcare.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Maven | apache | org.apache.kafka:kafka-streams-examples |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:connect |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:connect-mirror |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-examples |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-streams |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:connect-mirror-client |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-metadata |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-streams-test-utils |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-storage |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:connect-basic-auth-extension |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:connect-runtime |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-raft |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-streams-scala_2.12 |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-streams-upgrade-system-tests-0100 |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:connect-json |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-streams-scala_2.13 |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-clients |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:connect-file |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:connect-api |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-log4j-appender |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-storage-api |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:generator |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-server-common |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-tools |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-streams-upgrade-system-tests-28 |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-streams-upgrade-system-tests-0110 |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-streams-upgrade-system-tests-22 |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:streams-quickstart-java |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-streams-upgrade-system-tests-10 |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-streams-upgrade-system-tests-11 |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-streams-upgrade-system-tests-0102 |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-streams-upgrade-system-tests-24 |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-streams-upgrade-system-tests-31 |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-streams-upgrade-system-tests-20 |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka_2.13 |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka_2.12 |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-streams-upgrade-system-tests-26 |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-streams-upgrade-system-tests-23 |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-streams-upgrade-system-tests-21 |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-streams-upgrade-system-tests-30 |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:trogdor |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-streams-upgrade-system-tests-25 |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:streams-quickstart |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-shell |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-streams-upgrade-system-tests-0101 |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:kafka-streams-upgrade-system-tests-27 |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | apache | org.apache.kafka:connect-transforms |
< 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
| TuxCare:Maven | – | org.apache.kafka:connect |
>= 3.2.3, < 3.2.3.tuxcare Fix: upgrade to 3.2.3.tuxcare
|
Original advisory text
TuxCare security update for org.apache.kafka:connect (1 CVE)
TuxCare rebuilt org.apache.kafka:connect to address 1 CVE. Fixed in 3.2.3.tuxcare.
Timeline
Published4 Aug 2026
Updated29 Oct 2026
First seen7 Aug 2026
Sources
CLSA-2024-1733097627 · OSV
Track software like this
Free during beta