CVE-2026-123270

{
  "etk_id": "ETK-2026-3981",
  "cve_id": "CVE-2026-123270",
  "display_id": "CVE-2026-123270",
  "ghsa_id": "GHSA-h882-2qpw-598h",
  "euvd_id": "EUVD-2026-120155",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unauthenticated management API code execution in Redpanda Connect",
  "summary": "Redpanda Connect 4.39 through 4.110 in streams mode can expose a management API without an authentication check. An attacker able to reach that API can submit a pipeline configuration and run code as the Redpanda Connect service account. Releases 4.111 and later do not expose the API by default, but remain at risk if the HTTP management interface is manually enabled.",
  "mitigation": "Disable the HTTP management API and prevent untrusted networks from reaching TCP port 4195. Upgrade to 4.111 or later to make the interface opt-in, and only enable it behind appropriately restricted administrative network access.",
  "vendor": "Redpanda Data",
  "product": "Connect",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 4.39, <= 4.110"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "Connect",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": 9.8,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "differential",
  "exploit": false,
  "pipeline_minutes": 8.876419783333333,
  "t0_at": "2026-11-09T17:41:34.078000+00:00",
  "signals": {
    "check": {
      "at": "2026-11-09T18:37:06.519723+00:00",
      "days": 0.038569927349537035,
      "is_lower_bound": false,
      "measured_at": "2026-11-09T17:41:34.078000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-11-09T17:41:34.078000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-09T17:41:34.078000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-123270"
    }
  }
}