CLEANSTART-2026-AZ15456: Kafka broker using SASL/OAUTHBEARER with the default validator (sasl
Published Nov 13, 2026
·Updated
Security vulnerability affects the strimzi-kafka-operator package. A Kafka broker using SASL/OAUTHBEARER with the default validator (sasl.
Affected Software
1 affected componentFixes available
cleanstart/strimzi-kafka-operator<0.51.0-r8
0.51.0-r8
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/strimzi-kafka-operatorto a version that resolves this vulnerability.Fixed in 0.51.0-r8
Event History
Nov 13, 2026
Advisory Published
via OSV·12:37 AM
Data Sourced
via OSV·12:37 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Does exploitation require authentication or user interaction?
The severity vector indicates network attack access with low attack complexity, no privileges required, and no user interaction required.
2
What impact is indicated if the issue is exploited?
The reported vector rates confidentiality and integrity impact as high. It indicates no availability impact.
3
Is every deployment of the package identified as affected?
The advisory identifies Kafka broker deployments using SASL/OAUTHBEARER with the default validator. It does not provide information about other configurations.