CVE-2026-29190: Karapace: Path Traversal in Backup Reader
Karapace is an open-source implementation of Kafka REST and Schema Registry. Prior to version 6.0.0, there is a Path Traversal vulnerability in the backup reader (backup/backends/v3/backend.py). If a malicious backup file is provided to Karapace, an attacker may exploit insufficient path validation to perform arbitrary file read on the system where Karapace is running. The issue affects deployments that use the backup/restore functionality and process backups from untrusted sources. The impact depends on the file system permissions of the Karapace process. This issue has been patched in version 6.0.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-29190?
CVE-2026-29190 is categorized as a high severity vulnerability due to the potential for remote code execution via path traversal.
How do I fix CVE-2026-29190?
To fix CVE-2026-29190, upgrade your Karapace installation to version 6.0.0 or later.
What versions of Karapace are affected by CVE-2026-29190?
CVE-2026-29190 affects all versions of Karapace prior to version 6.0.0.
What type of vulnerability is CVE-2026-29190?
CVE-2026-29190 is a path traversal vulnerability found in the backup reader component of Karapace.
Can CVE-2026-29190 allow unauthorized access to sensitive files?
Yes, CVE-2026-29190 can allow attackers to access sensitive files on the server through malicious backup files.