Skip to content
OpenAdvisories

Product · Red Hat

StreamsHub Console for Apache Kafka®

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-96740

    Streamshub/console: console-operator: streams for apache kafka console: unfiltered kafka client properties → sa-token exfiltration via config.providers

    A flaw was found in the StreamsHub Console for Apache Kafka. Tenant-supplied Kafka client properties from the Console custom resource are copied into the console-api AdminClient configuration without filtering security-sensitive keys, allowing a Console CR au…

    Red Hat streams for Apache Kafka 3 streams for Apache Kafka 2 StreamsHub Console for Apache Kafka®