StackRadar

CVE-2024-31141

Medium

Advisory

Published 19 Nov 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.012
67th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
115
of 17,781 indexed, latest versions
Container images
107
deployed by those charts
Fix available
1 of 1
affected package

Apache Kafka Clients: Privilege escalation to filesystem read-access via automatic ConfigProvider

Carried by container images the latest versions of 115 of 17,781 indexed charts deploy, on 107 images.

Affected packageAffected versionsFixed inImages
kafka-clientsmaven2.3.0, 2.3.1, 2.4.0, 2.4.1+22 more3.7.1107
OSV records
GHSA-2x2g-32r7-p4x8

Charts affected

115 by stars
ChartLatestAffected imagesRadar Score
keycloakcodecentricVerified publisher18.10.01 of 3See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
kafka-clients@3.0.0
3.7.1

Open the chart page →

7,713
apicurio-registryapicurio-registry-helmVerified publisher3.8.01 of 2See more

apicurio-registry apicurio-registry-helm 3.8.0

1 of the 2 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
kafka-clients@3.5.1
3.7.1

Open the chart page →

6,675
zipkincarlosjgp0.2.01 of 2See more

zipkin carlosjgp 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
openzipkin/zipkin:2.21.060c3970df479
kafka-clients@2.4.1
3.7.1

Open the chart page →

3,229
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
kafka-clients@3.6.1
3.7.1

Open the chart page →

7,930
zipkinygqygq2Verified publisher2.1.41 of 4See more

zipkin ygqygq2 2.1.4

1 of the 4 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
openzipkin/zipkin:2.24197a9692f6a9
kafka-clients@3.6.0
3.7.1

Open the chart page →

2,764
kubernetes-loggingkubernetes-logging4.8.02 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

2 of the 6 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
kafka-clients@3.3.1
3.7.1
opensearchproject/opensearch:2.10.0c8f3ebd2a934
kafka-clients@3.5.1
3.7.1

Open the chart page →

10,530
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
kafka-clients@2.8.1
3.7.1

Open the chart page →

7,166
cloudflowcloudflow-helm-charts0.0.0-NIGHTLY011220201 of 1See more

cloudflow cloudflow-helm-charts 0.0.0-NIGHTLY01122020

1 of the 1 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
lightbend/cloudflow-operator:0.0.0-NIGHTLY011220202647f396de23
kafka-clients@2.5.0
3.7.1

Open the chart page →

1,886
cmak-operatorcmak-operatorVerified publisher2.2.21 of 3See more

cmak-operator cmak-operator 2.2.2

1 of the 3 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
ghcr.io/eshepelyuk/dckr/cmak-3.0.0.6:1.2.090a34412c6b5
kafka-clients@2.4.1
3.7.1

Open the chart page →

4,605
skywalkingkubesphere-testVerified publisher3.1.01 of 4See more

skywalking kubesphere-test 3.1.0

1 of the 4 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.1.0-es7641237e0299b
kafka-clients@2.4.1
3.7.1

Open the chart page →

18,042
kafdroplsst-sqre0.1.31 of 1See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
kafka-clients@3.0.1
3.7.1

Open the chart page →

7,901
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
kafka-clients@3.3.2
3.7.1

Open the chart page →

107,811
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.262 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

2 of the 6 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.5.0-debian-11-r08657bb93a581
kafka-clients@3.5.0
3.7.1
thingsboard/tb-node:3.6.0f40a542832c4
kafka-clients@3.2.0
3.7.1

Open the chart page →

14,566
clearml-servingallegroaiVerified publisher1.6.21 of 9See more

clearml-serving allegroai 1.6.2

1 of the 9 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.4.0-debian-11-r6ac64829e45b3
kafka-clients@3.4.0
3.7.1

Open the chart page →

17,877
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
kafka-clients@2.5.0
3.7.1

Open the chart page →

10,730
pitchforkexpediagroup0.1.41 of 1See more

pitchfork expediagroup 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
expediagroup/pitchfork:1.314f2cf61e7de9
kafka-clients@3.0.0
3.7.1

Open the chart page →

3,309
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.31 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
provectuslabs/kafka-ui:latest8f2ff02d64b0
kafka-clients@3.5.0
3.7.1

Open the chart page →

15,562
seata-serverheidaodageshiwoVerified publisher1.0.01 of 1See more

seata-server heidaodageshiwo 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
seataio/seata-server:1.5.1ee1ed55f4144
kafka-clients@2.6.3
3.7.1

Open the chart page →

5,624
kafka-kraft-on-k8skafka-kraft-on-k8sVerified publisher1.1.03 of 3See more

kafka-kraft-on-k8s kafka-kraft-on-k8s 1.1.0

3 of the 3 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
kafkakraft/kafka-connect:3.7.0062d697db7e5
kafka-clients@3.7.0
3.7.1
kafkakraft/kafka-controller:3.7.0f261ad288fce
kafka-clients@3.7.0
3.7.1
kafkakraft/kafkakraft:3.7.02e4b593b878b
kafka-clients@3.7.0
3.7.1

Open the chart page →

14,130
kokukokuVerified publisher1.0.01 of 7See more

koku koku 1.0.0

1 of the 7 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
kafka-clients@2.8.2
3.7.1

Open the chart page →

12,019
magentomagento3.2.31 of 12See more

magento magento 3.2.3

1 of the 12 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
magento/magento-cloud-docker-opensearch:2.5-1.4.059fb6f0f1461
kafka-clients@3.0.2
3.7.1

Open the chart page →

13,479
logstashromanow-helm-chartsVerified publisher1.5.01 of 1See more

logstash romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
library/logstash:7.17.817a4f64e9cf5
kafka-clients@2.5.1
3.7.1

Open the chart page →

7,529
analyticsaccount-serviceVerified publisher0.4.21 of 1See more

analytics account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
vitalii1992/analytics-service:latest8e798836ecea
kafka-clients@3.4.0
3.7.1

Open the chart page →

2,326
keycloakaccount-serviceVerified publisher18.4.51 of 2See more

keycloak account-service 18.4.5

1 of the 2 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
kafka-clients@3.0.0
3.7.1

Open the chart page →

7,713
quotes-provideraccount-serviceVerified publisher0.4.21 of 1See more

quotes-provider account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
vitalii1992/quotes-provider-service:latest44d2d6e00ab3
kafka-clients@3.4.0
3.7.1

Open the chart page →

2,205
airports-apiairports-api0.1.01 of 1See more

airports-api airports-api 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
dina1993/airports-api:latestac731244aed1
kafka-clients@3.3.2
3.7.1

Open the chart page →

1,958
airports-consumerairports-consumer0.1.01 of 1See more

airports-consumer airports-consumer 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
dina1993/airports-consumer:latest669d146a5e63
kafka-clients@3.3.2
3.7.1

Open the chart page →

1,947
airports-kafkaairports-kafka0.1.01 of 2See more

airports-kafka airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
kafka-clients@2.8.1
3.7.1

Open the chart page →

4,547
airports-producerairports-producer0.1.01 of 1See more

airports-producer airports-producer 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
dina1993/airports-producer:latest3d6b0dac1cb4
kafka-clients@3.3.2
3.7.1

Open the chart page →

1,947
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
ghcr.io/camunda-community-hub/zeebe-simple-monitor:2.6.2d9d796a1b846
kafka-clients@3.6.1
3.7.1

Open the chart page →

28,131
inbox-server-distributedappscodeVerified publisher2025.12.251 of 4See more

inbox-server-distributed appscode 2025.12.25

1 of the 4 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.1.04254021a8c71
kafka-clients@3.0.1
3.7.1

Open the chart page →

15,573
james-komposeappscodeVerified publisher0.1.01 of 4See more

james-kompose appscode 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.1.04254021a8c71
kafka-clients@3.0.1
3.7.1

Open the chart page →

16,975
automatedconfigurationassist-iot-automated-configuration1.0.02 of 5See more

automatedconfiguration assist-iot-automated-configuration 1.0.0

2 of the 5 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
assistiot/automated_configuration:latest23f195a7a26a
kafka-clients@2.8.1
3.7.1
provectuslabs/kafka-ui:latest8f2ff02d64b0
kafka-clients@3.5.0
3.7.1

Open the chart page →

14,728
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
assistiot/identity-manager_kc:latest0df4b4fa899a
kafka-clients@3.1.0
3.7.1

Open the chart page →

13,352
opendistro-esbeeinventor1.15.11 of 3See more

opendistro-es beeinventor 1.15.1

1 of the 3 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
kafka-clients@2.5.0
3.7.1

Open the chart page →

5,806
firehoseblip-firehoseVerified publisher0.0.181 of 11See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
kafka-clients@3.0.1
3.7.1

Open the chart page →

13,459
opensearch-singlenodecaptnbpVerified publisher1.0.91 of 2See more

opensearch-singlenode captnbp 1.0.9

1 of the 2 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.15.01963b3ece46d
kafka-clients@3.7.0
3.7.1

Open the chart page →

1,073
apache-ranger-admindata-platform-stableVerified publisher0.2.01 of 2See more

apache-ranger-admin data-platform-stable 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
kafka-clients@2.4.0
3.7.1

Open the chart page →

8,245
egeria-baseegeria-charts4.3.01 of 5See more

egeria-base egeria-charts 4.3.0

1 of the 5 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
kafka-clients@3.5.1
3.7.1

Open the chart page →

4,046
egeria-ctsegeria-charts4.3.01 of 3See more

egeria-cts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
kafka-clients@3.5.1
3.7.1

Open the chart page →

4,033
egeria-ptsegeria-charts4.3.01 of 3See more

egeria-pts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
kafka-clients@3.5.1
3.7.1

Open the chart page →

4,033
odpi-egeria-labegeria-charts4.3.01 of 4See more

odpi-egeria-lab egeria-charts 4.3.0

1 of the 4 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
kafka-clients@3.5.1
3.7.1

Open the chart page →

4,033
eoloPlanteolo-plannerVerified publisher0.1.01 of 7See more

eoloPlant eolo-planner 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
kafka-clients@3.0.0
3.7.1

Open the chart page →

27,537
eoloplannereoloplannerVerified publisher0.1.01 of 7See more

eoloplanner eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
kafka-clients@3.0.0
3.7.1

Open the chart page →

32,205
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.01 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
kafka-clients@3.0.0
3.7.1

Open the chart page →

27,537
eoloplannereoloplanner-molynx-gat0.1.01 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
molynx/planner:v1441c9f52f092
kafka-clients@3.0.0
3.7.1

Open the chart page →

28,482
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
arturisimo/planner:v1.0fff9de644941
kafka-clients@3.0.0
3.7.1

Open the chart page →

27,096
eoloplanteoloplant1.0.01 of 7See more

eoloplant eoloplant 1.0.0

1 of the 7 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
kafka-clients@3.0.0
3.7.1

Open the chart page →

27,537
eoloplantseoloplants-urjcVerified publisher0.1.01 of 7See more

eoloplants eoloplants-urjc 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
lourdesmorente/new-planner:1.0.0608745878cdb
kafka-clients@3.0.0
3.7.1

Open the chart page →

27,721
servereoloserverVerified publisher0.1.01 of 7See more

server eoloserver 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
kafka-clients@3.0.0
3.7.1

Open the chart page →

32,205

Container images carrying it

107 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
kafka-clients@2.8.1
3.7.1
1
ghcr.io/open-telemetry/demo:1.12.0-kafka071a788162e8
kafka-clients@3.7.0
3.7.1
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
kafka-clients@2.8.2
3.7.1
1
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
kafka-clients@3.5.1
3.7.1
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
kafka-clients@2.7.0
3.7.1
1
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
kafka-clients@3.3.2
3.7.1
1
quay.io/strimzi/operator:0.36.1e9e03b31007c
kafka-clients@3.5.1
3.7.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.