Apache Kafka Multiple Vulnerabilities CVSS 7.5

CERT-Bund issued a security advisory disclosing multiple vulnerabilities in Apache Kafka affecting versions below 4.1.2, 4.2.0, 3.9.2, and 4.0.1. The vulnerabilities carry a CVSS Base Score of 7.5 (high) and a Temporal Score of 6.5 (medium), with remote attack vector confirmed. An attacker can exploit these flaws to circumvent security measures and expose sensitive information.

Organizations running affected Apache Kafka deployments on Linux or UNIX systems should immediately apply available mitigations and monitor for updated vulnerability intelligence. IT security teams should assess exposure, prioritize patching, and review compensating controls given the remote exploitability and high severity score.