Skip to content
Strimzi vulnerabilities
Newest
-
strimzi strimzi-kafka-operator
Strimzi: Unrestricted access to all Secrets within namespace watched by the Topic operator
CVE-2026-55226
Fix available
5.4 Medium
-
red hat streams for apache kafka 2, streams for apache kafka 3.2.1, strimzi strimzi-kafka-operator +2 more
Strimzi: Cross-namespace privilege escalation via `Kafka.spec.entityOperator`
CVE-2026-55225
Fix available
8.0 High
-
linuxfoundation strimzi kafka operator, red hat streams for apache kafka 2, streams for apache kafka 3 +1 more +3 more
Strimzi: All CAs from a custom CA chain consisting of multiple CAs are trusted for mTLS user autentication
CVE-2026-27134
8.1 High
-
linuxfoundation strimzi, strimzi strimzi-kafka-operator +1 more
Strimzi All CAs from CA chain will be trusted in Kafka Connect and Kafka MirrorMaker 2 target clusters
CVE-2026-27133
5.9 Medium
-
linuxfoundation strimzi, strimzi strimzi-kafka-operator +1 more
Strimzi allows unrestricted access to all Secrets in the same Kubernetes namespace from Kafka Connect and MirrorMaker 2 operands
CVE-2025-66623
Fix available
7.4 High