Apache Kafka up to 4.2.1/4.3.1 FetchSnapshot RPC topics incorrect operator

Summaryinfo

A vulnerability, which was classified as problematic, has been found in Apache Kafka up to 4.2.1/4.3.1. Impacted is an unknown function of the component FetchSnapshot RPC Handler. Performing a manipulation of the argument topics results in incorrect operator. This vulnerability is reported as CVE-2026-83525. The attack is possible to be carried out remotely. No exploit exists. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability was found in Apache Kafka up to 4.2.1/4.3.1. It has been classified as problematic. This affects an unknown functionality of the component FetchSnapshot RPC Handler. The manipulation of the argument topics with an unknown input leads to a incorrect operator vulnerability. CWE is classifying the issue as CWE-480. The product accidentally uses the wrong operator, which changes the logic in security-relevant ways. This is going to have an impact on availability. The summary by CVE is:

Incorrect operator (CWE-480) in the FetchSnapshot RPC handler in Apache Kafka from 2.8.0 before 4.2.2, and from 4.3.0 before 4.3.2 on all platforms allows an authenticated attacker with CLUSTER_ACTION privilege to cause a denial of service (controller process termination) via a crafted FetchSnapshotRequest with an empty topics array or a topic with no partitions. Users are recommended to upgrade to version 4.2.2, 4.3.2, or 4.4.0, which fix this issue. Users on unsupported branches (4.1.x and earlier) should upgrade to 4.2.2 or later.

The advisory is shared at github.com. This vulnerability is uniquely identified as CVE-2026-83525 since 08/31/2026. The exploitability is told to be easy. It is possible to initiate the attack remotely. Additional levels of successful authentication are required for exploitation. Technical details are known, but no exploit is available.

Upgrading to version 4.2.2 or 4.3.2 eliminates this vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• Apache

Name

• Kafka

Version

• 4.2.0
• 4.2.1
• 4.3.0
• 4.3.1

License

• open-source

Website

• Vendor: https://www.apache.org/
• Product: https://github.com/apache/kafka/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion