CLEANSTART-2026-HB98946: When Jetty's `HttpClient` make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required)

Q: Which deployments are potentially affected?

The advisory identifies CleanStart Kafka, Solr, and Rundeck packages. Exposure requires their use of Jetty HttpClient for requests through a forward proxy.

Q: What network condition is involved in triggering the issue?

A request made through a forward proxy is involved, and the server may return an HTTP 407 Proxy Authentication Required response. The provided data does not state any additional authentication, user interaction, or configuration prerequisites.

Published Nov 11, 2026

Updated

CVE-2026-77711 affects multiple packages. When Jetty's HttpClient make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required). See references for individual vulnerability details.

Affected Software

4 affected componentsFixes available

cleanstart/kafka<4.3.2-r0

4.3.2-r0

cleanstart/kafka<4.0.2-r6

4.0.2-r6

cleanstart/solr<10.0.0-r14

10.0.0-r14

cleanstart/rundeck<6.1.0-r5

6.1.0-r5

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/kafka to a version that resolves this vulnerability.
Fixed in 4.3.2-r0
Upgrade
Upgrade cleanstart/kafka to a version that resolves this vulnerability.
Fixed in 4.0.2-r6
Upgrade
Upgrade cleanstart/solr to a version that resolves this vulnerability.
Fixed in 10.0.0-r14
Upgrade
Upgrade cleanstart/rundeck to a version that resolves this vulnerability.
Fixed in 6.1.0-r5

Event History

Nov 11, 2026

Advisory Published

via OSV·12:39 AM

Data Sourced

via OSV·12:39 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-77711

Frequently Asked Questions

Which deployments are potentially affected?

The advisory identifies CleanStart Kafka, Solr, and Rundeck packages. Exposure requires their use of Jetty HttpClient for requests through a forward proxy.

What network condition is involved in triggering the issue?

A request made through a forward proxy is involved, and the server may return an HTTP 407 Proxy Authentication Required response. The provided data does not state any additional authentication, user interaction, or configuration prerequisites.

CLEANSTART-2026-HB98946: When Jetty's `HttpClient` make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required)

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which deployments are potentially affected?

What network condition is involved in triggering the issue?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are potentially affected?

What network condition is involved in triggering the issue?