Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Kafka Client

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2025-27817 Public exploit EPSS 70%

    Apache Kafka Client: Arbitrary file read and SSRF vulnerability

    A possible arbitrary file read and SSRF vulnerability has been identified in Apache Kafka Client. Apache Kafka Clients accept configuration data for setting the SASL/OAUTHBEARER connection with the brokers, including "sasl.oauthbearer.token.endpoint.url" and …

    Apache Software Foundation Apache Kafka Client org.apache.kafka:kafka-clients Maven