strimzi vulnerabilities (CVE)

CVE records published for strimzi, newest first. Follow to get an email when a new one appears.

5 results
8.0High
CVE-2026-55225

Strimzi: Cross-namespace privilege escalation via `Kafka.spec.entityOperator`

strimzi strimzi-kafka-operator; Red Hat Streams for Apache Kafka 3.2.1; Red Hat streams for Apache Kafka 2

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In Strimzi 1.0.0 and earlier, an attacker who can create a Kafka custom resource can set Kafka.spec.entityOperator watchedNamespace to a tar…

8.1High
CVE-2026-27134

Strimzi: All CAs from a custom CA chain consisting of multiple CAs are trusted for mTLS user autentication

strimzi strimzi-kafka-operator; Red Hat streams for Apache Kafka 2; Red Hat streams for Apache Kafka 3

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In versions 0.49.0 through 0.50.0, when using a custom Cluster or Clients CA with a multistage CA chain consisting of multiple CAs, Strimzi…