CVE-2026-15911 Confluent Kafka Python Improper TLS Certificate Validation
Remote attackers can intercept sensitive data via improper TLS validation in the HashiCorp Vault KMS integration of the Confluent Kafka Python client.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-15911?
CVE-2026-15911 is a high-severity vulnerability in confluent-kafka, published on 1 Oct 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation.
Weakness: CWE-295
Which versions are affected by CVE-2026-15911?
Linux distribution packages (1)
python-confluent-kafka openSUSE:Tumbleweed | All versions | 2.15.1-1.1 |
How do I fix CVE-2026-15911?
Apply the vendor's patch.
Is CVE-2026-15911 being exploited?
There is no known exploitation of CVE-2026-15911 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Sources
Also known as GHSA-r743-crv8-m3qr, openSUSE-SU-2026:12006-1.