CVE-2025-66623
1 advisory.
Maven/io.strimzi:strimzi CVE-2025-66623: high 7.4
Strimzi allows unrestricted access to all Secrets in the same Kubernetes namespace from Kafka Connect and MirrorMaker 2 operands
Action: Upgrade io.strimzi:strimzi to 0.49.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.47.0 | 0.49.1 | - |
Fixed versions
| 0.49.1 |
Sources
- osv: GHSA-xrhh-hx36-485q
- https://github.com/strimzi/strimzi-kafka-operator/security/advisories/GHSA-xrhh-hx36-485q
- https://nvd.nist.gov/vuln/detail/CVE-2025-66623
- https://github.com/strimzi/strimzi-kafka-operator/commit/c8a14935e99c91eb0dd865431f46515da9f82ccc
- https://github.com/strimzi/strimzi-kafka-operator
CVE-2025-66623 · published · modified · JSON