{"id":"CVE-2026-44367","aliases":["EUVD-2026-33961","GHSA-75rx-m9vh-mm9p"],"status":"published","title":"Klaw: user lockout due to case sensitivity inconsistency","description":"Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to version 2.10.4, a vulnerability exists in the user registration and login mechanisms due to inconsistent handling of username case sensitivity, leading to a targeted Denial of Service (DoS) and complete account lockout. This issue has been patched in version 2.10.4.","severity":{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00236,"percentile":0.14684,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-178","CWE-20"],"published":"2026-06-02T15:29:59Z","modified":"2026-10-28T02:30:55Z","products":[{"vendor":"aiven-open","product":"klaw"}],"references":[{"url":"https://github.com/Aiven-Open/klaw/security/advisories/GHSA-75rx-m9vh-mm9p","tags":["x_refsource_CONFIRM","advisory"]},{"url":"https://github.com/Aiven-Open/klaw/releases/tag/v2.10.4","tags":["x_refsource_MISC","web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44367.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44367","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-44367","title":"Klaw: user lockout due to case sensitivity inconsistency","description":"Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to version 2.10.4, a vulnerability exists in the user registration and login mechanisms due to inconsistent handling of username case sensitivity, leading to a targeted Denial of Service (DoS) and complete account lockout. This issue has been patched in version 2.10.4.","status":"published","published":"2026-06-02T15:29:59.547Z","modified":"2026-06-02T15:55:58.686Z","cvss":[{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"}],"cwes":["CWE-178","CWE-20"],"updated_at":"2026-11-02T13:43:00.288193Z"}],"euvd":[{"id":"EUVD-2026-33961","description":"Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to version 2.10.4, a vulnerability exists in the user registration and login mechanisms due to inconsistent handling of username case sensitivity, leading to a targeted Denial of Service (DoS) and complete account lockout. This issue has been patched in version 2.10.4.","status":"published","published":"2026-06-02T15:29:59Z","modified":"2026-06-02T15:55:58Z","cvss":[{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T18:20:56.053165Z"}],"nvd":[{"id":"CVE-2026-44367","description":"Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to version 2.10.4, a vulnerability exists in the user registration and login mechanisms due to inconsistent handling of username case sensitivity, leading to a targeted Denial of Service (DoS) and complete account lockout. This issue has been patched in version 2.10.4.","status":"published","published":"2026-06-02T16:16:41.043Z","modified":"2026-07-22T19:10:00.12Z","cvss":[{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"}],"cwes":["CWE-20","CWE-178"],"updated_at":"2026-11-02T14:12:22.022466Z"}],"osv":[{"id":"CVE-2026-44367","title":"Klaw: user lockout due to case sensitivity inconsistency","description":"Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to version 2.10.4, a vulnerability exists in the user registration and login mechanisms due to inconsistent handling of username case sensitivity, leading to a targeted Denial of Service (DoS) and complete account lockout. This issue has been patched in version 2.10.4.","status":"published","published":"2026-06-02T15:29:59.547Z","modified":"2026-10-28T02:30:55.571033473Z","cvss":[{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-178","CWE-20"],"updated_at":"2026-11-02T15:45:04.820169Z"}]}}