Kafka FetchSnapshot bug lets privileged clients crash KRaft (CVE-2026-83525)
Authenticated clients with CLUSTER_ACTION can terminate the controller using an empty-topics FetchSnapshotRequest.
1 stories, newest first · one card per story
Authenticated clients with CLUSTER_ACTION can terminate the controller using an empty-topics FetchSnapshotRequest.
Today 840 readers · 1.1K views · 843 reads · all time 159K views