CVE-2026-83525

Full vulnerability record from the local CVENow database.

Description

Incorrect operator (CWE-480) in the FetchSnapshot RPC handler in Apache Kafka from 2.8.0 before 4.2.2, and from 4.3.0 before 4.3.2 on all platforms allows an authenticated attacker with CLUSTER_ACTION privilege to cause a denial of service (controller process termination) via a crafted FetchSnapshotRequest with an empty topics array or a topic with no partitions. Users are recommended to upgrade to version 4.2.2, 4.3.2, or 4.4.0, which fix this issue. Users on unsupported branches (4.1.x and earlier) should upgrade to 4.2.2 or later.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Awaiting Analysis

Source identifier

[email protected]

Published

2026-10-28 17:18:43.983000

Last modified

2026-10-29 15:04:37.187000

View original CVE JSON

{
  "id": "CVE-2026-83525",
  "sourceIdentifier": "[email protected]",
  "published": "2026-10-28T17:18:43.983",
  "lastModified": "2026-10-29T15:04:37.187",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Incorrect operator (CWE-480) in the FetchSnapshot RPC handler\nin Apache Kafka from 2.8.0 before 4.2.2, and from 4.3.0 before 4.3.2\non all platforms allows an authenticated attacker with\nCLUSTER_ACTION privilege to cause a denial of service\n(controller process termination) via a crafted\nFetchSnapshotRequest with an empty topics array or a topic\nwith no partitions.\n\nUsers are recommended to upgrade to version 4.2.2, 4.3.2, or\n4.4.0, which fix this issue. Users on unsupported branches\n(4.1.x and earlier) should upgrade to 4.2.2 or later."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Apache Software Foundation",
          "product": "Apache Kafka",
          "defaultStatus": "unaffected",
          "collectionURL": "https://repo.maven.apache.org/maven2",
          "packageName": "org.apache.kafka:kafka-raft",
          "packageURL": "pkg:maven/org.apache.kafka/kafka-raft",
          "versions": [
            {
              "version": "2.8.0",
              "lessThan": "4.2.2",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "4.3.0",
              "lessThan": "4.3.2",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-480"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/apache/kafka/pull/23185",
      "source": "[email protected]"
    },
    {
      "url": "https://kafka.apache.org/cve-list",
      "source": "[email protected]"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2026/10/28/7",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ]
}