Search: CVE-2026-55225

Strimzi Kafka Operator versions prior to 1.0.1 contain an improper privilege management vulnerability. An attacker able to create a Kafka custom resource can manipulate the entityOperator's watchedNamespace field to cause the operator to create a Role with full Secret CRUD permissions in a target namespace. This Role is bound to a ServiceAccount in the attacker's namespace, allowing the attacker to mint tokens and access Secrets across namespaces where the operator has permissions. The vulnerability is fixed in versions 1.0.1 and 1.1.0 by disabling the watchedNamespace feature by default and requiring explicit enabling.