CVE-2026-44367

Published: Jun 2, 2026Modified: Jul 22, 2026Deferred

2.7

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Exploitability: 1.2 / Impact: 1.4

Source: security-advisories@github.com (Secondary)

Description

Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to version 2.10.4, a vulnerability exists in the user registration and login mechanisms due to inconsistent handling of username case sensitivity, leading to a targeted Denial of Service (DoS) and complete account lockout. This issue has been patched in version 2.10.4.

Related CWEs

CWE-178

Improper Handling of Case Sensitivity

The product does not properly account for differences in case sensitivity when accessing or determining the properties of a resource, leading to inconsistent results.

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://github.com/Aiven-Open/klaw/releases/tag/v2.10.4

Source: security-advisories@github.com

https://github.com/Aiven-Open/klaw/security/advisories/GHSA-75rx-m9vh-mm9p

Source: security-advisories@github.com

Timeline

No history available yet.