en
Strimzi is a CNCF incubating open-source project for deploying and operating Apache Kafka on Kubernetes and OpenShift. Its core mission is to provide a Kubernetes-native operator and related components for managing Kafka clusters, topics, users, and data-integration workloads. It serves a global open-source community and supports development through production deployment scenarios.
As of 11/13/2026, strimzi recorded 2 security vulnerabilities in the last 90 days across 1 products, including 1 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, strimzi-kafka-operator had the most security vulnerabilities in the strimzi ecosystem, with 2 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-55226Strimzi: Unrestricted access to all Secrets within namespace watched by the Topic operatorCVE-2026-55225Strimzi: Cross-namespace privilege escalation via `Kafka.spec.entityOperator`CVE-2026-27134Strimzi: All CAs from a custom CA chain consisting of multiple CAs are trusted for mTLS user autenticationCVE-2026-27133Strimzi All CAs from CA chain will be trusted in Kafka Connect and Kafka MirrorMaker 2 target clustersCVE-2025-66623Strimzi allows unrestricted access to all Secrets in the same Kubernetes namespace from Kafka Connect and MirrorMaker 2 operands5 Results | Page 1 of 1
| SeverityHigh |
| SeverityHigh |
| SeverityMedium |
| SeverityHigh |