CVE-2026-78166: Code Injection in provectus kafka-ui
Description
CVE-2026-78166 is a code injection vulnerability in provectus kafka-ui versions 0.7.0, 0.7.1, and 0.7.2. It affects the executeSmartFilterTest function in the Groovy Code Handler component, allowing remote attackers to inject code. The vulnerability has a medium severity score of 5.3 and public exploit code is available. The vendor has not yet responded or released a patch.
CVSS v4.0
Score 5.3medium
Affected software
provectus
kafka-ui
pkg:maven/com.provectus/kafka-uicpe:2.3:a:provectus:kafka-ui:*:*:*:*:*:*:*:*Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability exists in the executeSmartFilterTest function of the kafka-ui-api component in provectus kafka-ui up to version 0.7.2. It allows remote code injection via manipulation of Groovy code handling. The flaw was responsibly disclosed but remains unpatched. Public exploit code has been released, increasing the risk of exploitation.
Potential Impact
Successful exploitation allows remote attackers to inject and execute arbitrary code within the kafka-ui application context. This can lead to unauthorized actions, data compromise, or further system compromise depending on the environment and privileges of the application.
Mitigation Recommendations
No official patch or fix is currently available as the vendor has not responded. Users should consider disabling or restricting access to the executeSmartFilterTest functionality or the Groovy Code Handler component until a fix is released. Monitor vendor advisories for updates and apply patches promptly once available.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-08-23T13:57:16.161Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a8ba062acd9273b49b6ee97
Added to database: 08/24/2026, 01:37:38 UTC
Last enriched: 09/10/2026, 23:03:52 UTC
Last updated: 10/06/2026, 06:48:20 UTC
Views: 96
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.