StackRadar

CVE-2025-27818

High

Advisory

Published 10 Jun 2025In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.010
62nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
24
of 17,781 indexed, latest versions
Container images
16
deployed by those charts
Fix available
4 of 5
affected packages

Apache Kafka: Possible RCE attack via SASL JAAS LdapLoginModule configuration

Carried by container images the latest versions of 24 of 17,781 indexed charts deploy, on 16 images.

Affected packageAffected versionsFixed inImages
kafka_2.13maven2.8.1-test, 3.3.0, 3.7.0, 3.7.1+1 more3.9.110
kafka_2.12maven2.5.1, 2.8.1-javadoc, 3.3.1, 3.4.0+1 more3.9.15
kafkabitnami2.8.1-150, 3.4.0-2, 3.5.0-03.9.13
Apache Kafkabitnami3.5.03.9.11
kafka_2.11maven2.4.0no fix listed1
OSV records
BIT-kafka-2025-27818GHSA-76qp-h5mr-frr4

Charts affected

24 by stars
ChartLatestAffected imagesRadar Score
kafkakubelauncherVerified publisher0.1.261 of 1See more

kafka kubelauncher 0.1.26

1 of the 1 container images this version deploys carry CVE-2025-27818.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/kafkadigest-pinned43e1085cd0a8
kafka_2.13@3.9.0
3.9.1

Open the chart page →

1,360
kafkakafka18.0.11 of 1See more

kafka kafka 18.0.1

1 of the 1 container images this version deploys carry CVE-2025-27818.

Container imageDigestPackageFixed in
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
kafka_2.13@3.7.1
3.9.1

Open the chart page →

3,395
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2025-27818.

Container imageDigestPackageFixed in
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
kafka_2.12@3.3.1
3.9.1

Open the chart page →

10,530
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.261 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

1 of the 6 container images this version deploys carry CVE-2025-27818.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.5.0-debian-11-r08657bb93a581
Apache Kafka@3.5.0
kafka@3.5.0-0
kafka_2.12@3.5.0
3.9.1
3.9.1
3.9.1

Open the chart page →

14,566
clearml-servingallegroaiVerified publisher1.6.21 of 9See more

clearml-serving allegroai 1.6.2

1 of the 9 container images this version deploys carry CVE-2025-27818.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.4.0-debian-11-r6ac64829e45b3
kafka@3.4.0-2
kafka_2.12@3.4.0
3.9.1
3.9.1

Open the chart page →

17,877
enavenav-service-architectureVerified publisher0.0.71 of 10See more

enav enav-service-architecture 0.0.7

1 of the 10 container images this version deploys carry CVE-2025-27818.

Container imageDigestPackageFixed in
apache/kafka:3.9.0fbc7d7c428e3
kafka_2.13@3.9.0
3.9.1

Open the chart page →

15,860
kafka-kraft-on-k8skafka-kraft-on-k8sVerified publisher1.1.03 of 3See more

kafka-kraft-on-k8s kafka-kraft-on-k8s 1.1.0

3 of the 3 container images this version deploys carry CVE-2025-27818.

Container imageDigestPackageFixed in
kafkakraft/kafka-connect:3.7.0062d697db7e5
kafka_2.13@3.7.0
3.9.1
kafkakraft/kafka-controller:3.7.0f261ad288fce
kafka_2.13@3.7.0
3.9.1
kafkakraft/kafkakraft:3.7.02e4b593b878b
kafka_2.13@3.7.0
3.9.1

Open the chart page →

14,130
logstashromanow-helm-chartsVerified publisher1.5.01 of 1See more

logstash romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2025-27818.

Container imageDigestPackageFixed in
library/logstash:7.17.817a4f64e9cf5
kafka_2.12@2.5.1
3.9.1

Open the chart page →

7,529
airports-kafkaairports-kafka0.1.01 of 2See more

airports-kafka airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-27818.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
kafka_2.13@2.8.1-test
3.9.1

Open the chart page →

4,547
apache-ranger-admindata-platform-stableVerified publisher0.2.01 of 2See more

apache-ranger-admin data-platform-stable 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-27818.

Container imageDigestPackageFixed in
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
kafka_2.11@2.4.0
no fix listed

Open the chart page →

8,245
kafkagengxiankun-charts0.2.01 of 1See more

kafka gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-27818.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
kafka_2.13@2.8.1-test
3.9.1

Open the chart page →

4,547
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2025-27818.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-kafka071a788162e8
kafka_2.13@3.7.0
3.9.1

Open the chart page →

49,025
helm-airportshelm-airports0.1.01 of 7See more

helm-airports helm-airports 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-27818.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
kafka_2.13@2.8.1-test
3.9.1

Open the chart page →

12,696
airports-kafkahelm-airports-dan0.1.01 of 2See more

airports-kafka helm-airports-dan 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-27818.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
kafka_2.13@2.8.1-test
3.9.1

Open the chart page →

4,547
helm-airportshelm-airports-dan0.1.01 of 7See more

helm-airports helm-airports-dan 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-27818.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
kafka_2.13@2.8.1-test
3.9.1

Open the chart page →

5,573
airports-kafkahelm-airports-kafka0.1.01 of 2See more

airports-kafka helm-airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-27818.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
kafka_2.13@2.8.1-test
3.9.1

Open the chart page →

4,547
ckanhelmforgeVerified publisher1.3.81 of 6See more

ckan helmforge 1.3.8

1 of the 6 container images this version deploys carry CVE-2025-27818.

Container imageDigestPackageFixed in
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
kafka_2.13@3.9.0
3.9.1

Open the chart page →

9,920
account-lookup-servicemojaloop13.0.01 of 4See more

account-lookup-service mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2025-27818.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
kafka_2.13@3.3.0
3.9.1

Open the chart page →

11,695
account-lookup-service-adminmojaloop13.0.01 of 4See more

account-lookup-service-admin mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2025-27818.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
kafka_2.13@3.3.0
3.9.1

Open the chart page →

11,695
admin-api-svcmojaloop12.0.01 of 4See more

admin-api-svc mojaloop 12.0.0

1 of the 4 container images this version deploys carry CVE-2025-27818.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
kafka_2.13@3.3.0
3.9.1

Open the chart page →

12,108
backendmojaloop0.1.01 of 6See more

backend mojaloop 0.1.0

1 of the 6 container images this version deploys carry CVE-2025-27818.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:2.8.1-debian-11-r7b6e381ffd6ae
kafka@2.8.1-150
kafka_2.12@2.8.1-javadoc
3.9.1
3.9.1

Open the chart page →

16,198
fspiop-transfer-api-svcmojaloop12.0.11 of 3See more

fspiop-transfer-api-svc mojaloop 12.0.1

1 of the 3 container images this version deploys carry CVE-2025-27818.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
kafka_2.13@3.3.0
3.9.1

Open the chart page →

11,479
mojaloopmojaloop14.0.01 of 6See more

mojaloop mojaloop 14.0.0

1 of the 6 container images this version deploys carry CVE-2025-27818.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
kafka_2.13@3.3.0
3.9.1

Open the chart page →

19,226
kafka-helm-chartnotesprojectchart0.1.01 of 1See more

kafka-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-27818.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
kafka_2.13@2.8.1-test
3.9.1

Open the chart page →

4,547

Container images carrying it

16 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
wurstmeister/kafka:latest2d4bbf9cc83d
kafka_2.13@2.8.1-test
3.9.1
7
solsson/kafka:latest41e5d8f6f290
kafka_2.13@3.3.0
3.9.1
5
apache/kafka:3.9.0fbc7d7c428e3
kafka_2.13@3.9.0
3.9.1
1
bitnamilegacy/kafka:3.5.0-debian-11-r08657bb93a581
Apache Kafka@3.5.0
kafka@3.5.0-0
kafka_2.12@3.5.0
3.9.1
3.9.1
3.9.1
1
bitnamilegacy/kafka:3.4.0-debian-11-r6ac64829e45b3
kafka@3.4.0-2
kafka_2.12@3.4.0
3.9.1
3.9.1
1
bitnamilegacy/kafka:2.8.1-debian-11-r7b6e381ffd6ae
kafka@2.8.1-150
kafka_2.12@2.8.1-javadoc
3.9.1
3.9.1
1
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
kafka_2.13@3.9.0
3.9.1
1
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
kafka_2.11@2.4.0
no fix listed
1
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
kafka_2.13@3.7.1
3.9.1
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
kafka_2.13@3.7.0
3.9.1
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
kafka_2.13@3.7.0
3.9.1
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
kafka_2.13@3.7.0
3.9.1
1
library/logstash:7.17.817a4f64e9cf5
kafka_2.12@2.5.1
3.9.1
1
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
kafka_2.12@3.3.1
3.9.1
1
ghcr.io/kubelauncher/kafka43e1085cd0a8
kafka_2.13@3.9.0
3.9.1
1
ghcr.io/open-telemetry/demo:1.12.0-kafka071a788162e8
kafka_2.13@3.7.0
3.9.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.