Skip to contentStrimzi Strimzi-kafka-operator vulnerabilities
- strimzi strimzi-kafka-operatorStrimzi: Unrestricted access to all Secrets within namespace watched by the Topic operatorCVE-2026-55226Fix available5.4 Medium
- red hat streams for apache kafka 2, streams for apache kafka 3.2.1, strimzi strimzi-kafka-operator +2 moreStrimzi: Cross-namespace privilege escalation via `Kafka.spec.entityOperator`CVE-2026-55225Fix available8.0 High
- linuxfoundation strimzi kafka operator, red hat streams for apache kafka 2, streams for apache kafka 3 +1 more +3 moreStrimzi: All CAs from a custom CA chain consisting of multiple CAs are trusted for mTLS user autenticationCVE-2026-271348.1 High
- linuxfoundation strimzi, strimzi strimzi-kafka-operator +1 moreStrimzi All CAs from CA chain will be trusted in Kafka Connect and Kafka MirrorMaker 2 target clustersCVE-2026-271335.9 Medium
- linuxfoundation strimzi, strimzi strimzi-kafka-operator +1 moreStrimzi allows unrestricted access to all Secrets in the same Kubernetes namespace from Kafka Connect and MirrorMaker 2 operandsCVE-2025-66623Fix available7.4 High