CyberRota Analysis
AI-GeneratedRedpanda versions up to 26.2.2 are vulnerable due to the Admin API being bound to all network interfaces with authentication disabled by default, allowing unauthenticated users to access critical administrative functions. This vulnerability enables attackers to create and delete broker accounts, alter cluster configurations, and disrupt partition replication, posing a significant risk to data integrity and availability. Organizations using Redpanda should prioritize immediate remediation to secure their deployments against potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Redpanda through 26.2.2 binds the Admin API to 0.0.0.0:9644 with admin_api_require_auth defaulting to false, treating unauthenticated requests as superusers. Attackers can reach port 9644 without credentials to create and delete broker accounts, modify cluster configuration, and disrupt partition replication.