StackRadar

CVE-2025-27817

High

Advisory

Published 10 Jun 2025In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.688
99th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
65
of 17,781 indexed, latest versions
Container images
66
deployed by those charts
Fix available
3 of 3
affected packages

Apache Kafka Client: Arbitrary file read and SSRF vulnerability

Carried by container images the latest versions of 65 of 17,781 indexed charts deploy, on 66 images.

Affected packageAffected versionsFixed inImages
kafka-clientsmaven3.1.0, 3.1.1, 3.1.2, 3.2.0+13 more3.9.166
kafkabitnami3.4.0-2, 3.5.0-03.9.12
Apache Kafkabitnami3.5.03.9.11
OSV records
BIT-kafka-2025-27817GHSA-vgq5-3255-v292

Charts affected

65 by stars
ChartLatestAffected imagesRadar Score
apicurio-registryapicurio-registry-helmVerified publisher3.8.01 of 2See more

apicurio-registry apicurio-registry-helm 3.8.0

1 of the 2 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
kafka-clients@3.5.1
3.9.1

Open the chart page →

6,675
apim3graviteeioVerified publisher4.12.192 of 4See more

apim3 graviteeio 4.12.19

2 of the 4 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
kafka-clients@3.7.1
3.9.1
graviteeio/apim-management-api:4.12.19-debian27374522cd04
kafka-clients@3.7.1
3.9.1

Open the chart page →

4,806
kafkakubelauncherVerified publisher0.1.261 of 1See more

kafka kubelauncher 0.1.26

1 of the 1 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/kafkadigest-pinned43e1085cd0a8
kafka-clients@3.9.0
3.9.1

Open the chart page →

1,360
kafkakafka18.0.11 of 1See more

kafka kafka 18.0.1

1 of the 1 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
kafka-clients@3.7.1
3.9.1

Open the chart page →

3,395
wazuhwazuh-helmVerified publisher0.0.81 of 4See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
wazuh/wazuh-indexer:4.11.1a7a2076b167e
kafka-clients@3.7.1
3.9.1

Open the chart page →

6,168
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
kafka-clients@3.6.1
3.9.1

Open the chart page →

7,930
zipkinygqygq2Verified publisher2.1.41 of 4See more

zipkin ygqygq2 2.1.4

1 of the 4 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
openzipkin/zipkin:2.24197a9692f6a9
kafka-clients@3.6.0
3.9.1

Open the chart page →

2,764
hertzbeathertzbeatOfficialVerified publisher1.8.12 of 4See more

hertzbeat hertzbeat 1.8.1

2 of the 4 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
apache/hertzbeat:1.8.075d48a62748f
kafka-clients@3.7.1
3.9.1
apache/hertzbeat-collector:1.8.0a2bab1be574c
kafka-clients@3.7.1
3.9.1

Open the chart page →

14,000
kubernetes-loggingkubernetes-logging4.8.02 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

2 of the 6 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
kafka-clients@3.3.1
3.9.1
opensearchproject/opensearch:2.10.0c8f3ebd2a934
kafka-clients@3.5.1
3.9.1

Open the chart page →

10,530
opensearchcaptnbpVerified publisher3.1.11 of 2See more

opensearch captnbp 3.1.1

1 of the 2 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.19.269588c664014
kafka-clients@3.7.1
3.9.1

Open the chart page →

998
flowableflowable-oss7.1.01 of 2See more

flowable flowable-oss 7.1.0

1 of the 2 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
flowable/flowable-rest:7.1.0b7ae287502cd
kafka-clients@3.7.1
3.9.1

Open the chart page →

2,784
aegraviteeioVerified publisher3.0.21 of 1See more

ae graviteeio 3.0.2

1 of the 1 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
graviteeio/ae-engine:3.0.24140932887e0
kafka-clients@3.7.1
3.9.1

Open the chart page →

1,380
apimgraviteeioVerified publisher4.12.192 of 4See more

apim graviteeio 4.12.19

2 of the 4 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
kafka-clients@3.7.1
3.9.1
graviteeio/apim-management-api:4.12.19-debian27374522cd04
kafka-clients@3.7.1
3.9.1

Open the chart page →

4,806
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
kafka-clients@3.3.2
3.9.1

Open the chart page →

107,811
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.262 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

2 of the 6 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.5.0-debian-11-r08657bb93a581
Apache Kafka@3.5.0
kafka@3.5.0-0
kafka-clients@3.5.0
3.9.1
3.9.1
3.9.1
thingsboard/tb-node:3.6.0f40a542832c4
kafka-clients@3.2.0
3.9.1

Open the chart page →

14,566
clearml-servingallegroaiVerified publisher1.6.21 of 9See more

clearml-serving allegroai 1.6.2

1 of the 9 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.4.0-debian-11-r6ac64829e45b3
kafka@3.4.0-2
kafka-clients@3.4.0
3.9.1
3.9.1

Open the chart page →

17,877
dbrepodbrepo1.13.31 of 25See more

dbrepo dbrepo 1.13.3

1 of the 25 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
kafka-clients@3.7.1
3.9.1

Open the chart page →

52,635
enavenav-service-architectureVerified publisher0.0.71 of 10See more

enav enav-service-architecture 0.0.7

1 of the 10 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
apache/kafka:3.9.0fbc7d7c428e3
kafka-clients@3.9.0
3.9.1

Open the chart page →

15,860
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.31 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
provectuslabs/kafka-ui:latest8f2ff02d64b0
kafka-clients@3.5.0
3.9.1

Open the chart page →

15,562
kafka-kraft-on-k8skafka-kraft-on-k8sVerified publisher1.1.03 of 3See more

kafka-kraft-on-k8s kafka-kraft-on-k8s 1.1.0

3 of the 3 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
kafkakraft/kafka-connect:3.7.0062d697db7e5
kafka-clients@3.7.0
3.9.1
kafkakraft/kafka-controller:3.7.0f261ad288fce
kafka-clients@3.7.0
3.9.1
kafkakraft/kafkakraft:3.7.02e4b593b878b
kafka-clients@3.7.0
3.9.1

Open the chart page →

14,130
analyticsaccount-serviceVerified publisher0.4.21 of 1See more

analytics account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
vitalii1992/analytics-service:latest8e798836ecea
kafka-clients@3.4.0
3.9.1

Open the chart page →

2,326
quotes-provideraccount-serviceVerified publisher0.4.21 of 1See more

quotes-provider account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
vitalii1992/quotes-provider-service:latest44d2d6e00ab3
kafka-clients@3.4.0
3.9.1

Open the chart page →

2,205
airports-apiairports-api0.1.01 of 1See more

airports-api airports-api 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
dina1993/airports-api:latestac731244aed1
kafka-clients@3.3.2
3.9.1

Open the chart page →

1,958
airports-consumerairports-consumer0.1.01 of 1See more

airports-consumer airports-consumer 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
dina1993/airports-consumer:latest669d146a5e63
kafka-clients@3.3.2
3.9.1

Open the chart page →

1,947
airports-producerairports-producer0.1.01 of 1See more

airports-producer airports-producer 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
dina1993/airports-producer:latest3d6b0dac1cb4
kafka-clients@3.3.2
3.9.1

Open the chart page →

1,947
akto-testing-db-layerakto1.42.161 of 2See more

akto-testing-db-layer akto 1.42.16

1 of the 2 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer:1.59.3_local8cdcb7e83f9f
kafka-clients@3.7.2
3.9.1

Open the chart page →

5,489
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
ghcr.io/camunda-community-hub/zeebe-simple-monitor:2.6.2d9d796a1b846
kafka-clients@3.6.1
3.9.1

Open the chart page →

28,131
automatedconfigurationassist-iot-automated-configuration1.0.01 of 5See more

automatedconfiguration assist-iot-automated-configuration 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
provectuslabs/kafka-ui:latest8f2ff02d64b0
kafka-clients@3.5.0
3.9.1

Open the chart page →

14,728
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
assistiot/identity-manager_kc:latest0df4b4fa899a
kafka-clients@3.1.0
3.9.1

Open the chart page →

13,352
opensearch-singlenodecaptnbpVerified publisher1.0.91 of 2See more

opensearch-singlenode captnbp 1.0.9

1 of the 2 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.15.01963b3ece46d
kafka-clients@3.7.0
3.9.1

Open the chart page →

1,073
egeria-baseegeria-charts4.3.01 of 5See more

egeria-base egeria-charts 4.3.0

1 of the 5 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
kafka-clients@3.5.1
3.9.1

Open the chart page →

4,046
egeria-ctsegeria-charts4.3.01 of 3See more

egeria-cts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
kafka-clients@3.5.1
3.9.1

Open the chart page →

4,033
egeria-ptsegeria-charts4.3.01 of 3See more

egeria-pts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
kafka-clients@3.5.1
3.9.1

Open the chart page →

4,033
odpi-egeria-labegeria-charts4.3.01 of 4See more

odpi-egeria-lab egeria-charts 4.3.0

1 of the 4 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
kafka-clients@3.5.1
3.9.1

Open the chart page →

4,033
fineractfineract-openshift0.1.11 of 4See more

fineract fineract-openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
apache/fineract:1.12.1a83cf1980609
kafka-clients@3.8.1
3.9.1

Open the chart page →

7,792
galoy-depsgaloymoney0.10.201 of 9See more

galoy-deps galoymoney 0.10.20

1 of the 9 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.39.002f6f143fc6d
kafka-clients@3.6.1
3.9.1

Open the chart page →

11,961
galoy-depsgaloymoney20.10.201 of 9See more

galoy-deps galoymoney2 0.10.20

1 of the 9 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.39.002f6f143fc6d
kafka-clients@3.6.1
3.9.1

Open the chart page →

11,961
opentelemetry-demogpg-dev0.33.82 of 27See more

opentelemetry-demo gpg-dev 0.33.8

2 of the 27 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.18.07f6fa1efee8f
kafka-clients@3.7.1
3.9.1
ghcr.io/open-telemetry/demo:1.12.0-kafka071a788162e8
kafka-clients@3.7.0
3.9.1

Open the chart page →

49,025
siembolgresearch0.1.62 of 4See more

siembol gresearch 0.1.6

2 of the 4 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
gresearchdev/siembol-config-editor-rest:latest91863a50afb7
kafka-clients@3.1.2
3.9.1
gresearchdev/siembol-storm-topology-manager:latest8dad36a05ebf
kafka-clients@3.1.2
3.9.1

Open the chart page →

14,312
helm-airportshelm-airports0.1.03 of 7See more

helm-airports helm-airports 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
dina1993/airports-api:latestac731244aed1
kafka-clients@3.3.2
3.9.1
dina1993/airports-consumer:latest669d146a5e63
kafka-clients@3.3.2
3.9.1
dina1993/airports-producer:latest3d6b0dac1cb4
kafka-clients@3.3.2
3.9.1

Open the chart page →

12,696
ckanhelmforgeVerified publisher1.3.81 of 6See more

ckan helmforge 1.3.8

1 of the 6 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
kafka-clients@3.9.0
3.9.1

Open the chart page →

9,920
kadeck-webkadeck0.6.01 of 1See more

kadeck-web kadeck 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
xeotek/kadeck:4.2.94c6b04d9ce55
kafka-clients@3.3.1
3.9.1

Open the chart page →

7,254
strimzi-kafka-operatorkvalitetsitVerified publisher0.36.11 of 1See more

strimzi-kafka-operator kvalitetsit 0.36.1

1 of the 1 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.36.1e9e03b31007c
kafka-clients@3.5.1
3.9.1

Open the chart page →

4,098
mitre-siphonmitre-siphon0.2.91 of 4See more

mitre-siphon mitre-siphon 0.2.9

1 of the 4 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/mitre-siphon:main503c00321502
kafka-clients@3.3.2
3.9.1

Open the chart page →

3,083
account-lookup-servicemojaloop13.0.01 of 4See more

account-lookup-service mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
kafka-clients@3.3.0
3.9.1

Open the chart page →

11,695
account-lookup-service-adminmojaloop13.0.01 of 4See more

account-lookup-service-admin mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
kafka-clients@3.3.0
3.9.1

Open the chart page →

11,695
admin-api-svcmojaloop12.0.01 of 4See more

admin-api-svc mojaloop 12.0.0

1 of the 4 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
kafka-clients@3.3.0
3.9.1

Open the chart page →

12,108
fspiop-transfer-api-svcmojaloop12.0.11 of 3See more

fspiop-transfer-api-svc mojaloop 12.0.1

1 of the 3 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
kafka-clients@3.3.0
3.9.1

Open the chart page →

11,479
mojaloopmojaloop14.0.01 of 6See more

mojaloop mojaloop 14.0.0

1 of the 6 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
kafka-clients@3.3.0
3.9.1

Open the chart page →

19,226
logic-ms-helm-chartnotesprojectchart0.1.01 of 2See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-27817.

Container imageDigestPackageFixed in
vlebediantsev/logic-ms:latestdf8bf38c535b
kafka-clients@3.1.1
3.9.1

Open the chart page →

6,852

Container images carrying it

66 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
trinodb/trino:45038c6f24ab1a4
kafka-clients@3.7.0
3.9.1
1
vitalii1992/analytics-service:latest8e798836ecea
kafka-clients@3.4.0
3.9.1
1
vitalii1992/quotes-provider-service:latest44d2d6e00ab3
kafka-clients@3.4.0
3.9.1
1
vlebediantsev/logic-ms:latestdf8bf38c535b
kafka-clients@3.1.1
3.9.1
1
vlebediantsev/registration-ms-final:latest427af418b75e
kafka-clients@3.1.1
3.9.1
1
vlebediantsev/user-data-ms-final-final:latest9319437f3c8f
kafka-clients@3.1.1
3.9.1
1
wazuh/wazuh-indexer:4.11.1a7a2076b167e
kafka-clients@3.7.1
3.9.1
1
xeotek/kadeck:4.2.94c6b04d9ce55
kafka-clients@3.3.1
3.9.1
1
ghcr.io/camunda-community-hub/zeebe-simple-monitor:2.6.2d9d796a1b846
kafka-clients@3.6.1
3.9.1
1
ghcr.io/curium-rocks/mitre-siphon:main503c00321502
kafka-clients@3.3.2
3.9.1
1
ghcr.io/kubelauncher/kafka43e1085cd0a8
kafka-clients@3.9.0
3.9.1
1
ghcr.io/open-telemetry/demo:1.12.0-kafka071a788162e8
kafka-clients@3.7.0
3.9.1
1
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer:1.59.3_local8cdcb7e83f9f
kafka-clients@3.7.2
3.9.1
1
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
kafka-clients@3.5.1
3.9.1
1
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
kafka-clients@3.3.2
3.9.1
1
quay.io/strimzi/operator:0.36.1e9e03b31007c
kafka-clients@3.5.1
3.9.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.