A flaw was found in confluent-kafka. The HashiCorp Vault Key Management Service (KMS) integration fails to properly validate Transport Layer Security (TLS) certificates by default. A remote attacker able to intercept network traffic could exploit this flaw to intercept and decrypt sensitive data or tamper with communications between the client and the Vault service.
Last checked: 2026-10-06 04:30 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-10-06 02:00 UTC)
Fix evidence last checked: 2026-10-16 09:47 UTC