strimzi/strimzi-kafka-operator Security Advisories | GitStock

medium2026-06-18

Strimzi: Unrestricted access to all Secrets within namespace watched by the Topic operator

GHSA-r427-j2h7-wv3m · CVE-2026-55226

high2026-06-18

Strimzi: Cross-namespace privilege escalation via `Kafka.spec.entityOperator`

GHSA-mw9r-p8xp-wx96 · CVE-2026-55225

high2025-12-05

Strimzi allows unrestricted access to all Secrets in the same Kubernetes namespace from Kafka Connect and MirrorMaker 2 operands

GHSA-xrhh-hx36-485q · CVE-2025-66623

high2024-06-17

STRIMZI incorrect access control

GHSA-q2xx-f8r3-9mg5 · CVE-2024-36543