CVE-2025-49127: Kafbat Kafka-UI

High severity, CVSS 8.9. EPSS: 0.6% chance of exploitation in the next 30 days.

Kafbat UI is a web user interface for managing Apache Kafka clusters. An unsafe deserialization vulnerability in version 1.0.0 allows any unauthenticated user to execute arbitrary code on the server. Version 1.1.0 fixes the issue.

Affected products

• Kafbat Kafka-UI: version 1.0.0 only

Published 2025-06-06. Last modified 2026-06-17.