CVE-2025-27819

In CVE-2023-25194, we announced the RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration in Kafka Connect API. But not only Kafka Connect API is vulnerable to this attack, the Apache Kafka brokers also have this vulnerability. To exploit this vulnerability, the attacker needs to be able to connect to the Kafka cluster and have the AlterConfigs permission on the cluster resource. Since Apache Kafka 3.4.0, we have added a system property ("-Dorg.apache.kafka.disallowed.login.modules") to disable the problematic login modules usage in SASL JAAS configuration. Also by default "com.sun.security.auth.module.JndiLoginModule" is disabled in Apache Kafka 3.4.0, and "com.sun.security.auth.module.JndiLoginModule,com.sun.security.auth.module.LdapLoginModule" is disabled by default in in Apache Kafka 3.9.1/4.0.0

• CWE-502

• https://kafka.apache.org/cve-listVendor Advisory

Published

Jun 10, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-27811A local privilege escalation in the razer_elevation_service.…7.8
• CVE-2025-27812MSI Center before 2.0.52.0 allows TOCTOU Local Privilege Esc…8.1
• CVE-2025-27813MSI Center before 2.0.52.0 has Missing PE Signature Validati…8.1
• CVE-2025-27816A vulnerability was discovered in the Arctera InfoScale 7.0 …9.8
• CVE-2025-27817A possible arbitrary file read and SSRF vulnerability has be…7.5
• CVE-2025-27818A possible security vulnerability has been identified in Apa…8.8
• CVE-2025-2782The WatchGuard Terminal Services Agent on Windows does not p…6.3
• CVE-2025-27820A bug in PSL validation logic in Apache HttpClient 5.4.x dis…7.5
• CVE-2025-27821Out-of-bounds Write vulnerability in Apache Hadoop HDFS nati…7.3
• CVE-2025-27822An issue was discovered in the Masquerade module before 1.x-…7.5
• CVE-2025-27823An issue was discovered in the Mail Disguise module before 1…6.4
• CVE-2025-27824An XSS issue was discovered in the Link iframe formatter mod…6.4