CVE-2026-44367
LowCVSS 2.7Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
In Klaw, a self-service Apache Kafka Topic Management tool, prior to version 2.10.4, inconsistent handling of username case sensitivity in registration and login mechanisms allows a targeted Denial of Service (DoS) and complete account lockout.
Risk Assessment
An attacker can lock out user accounts, preventing access to the system and potentially disrupting Kafka topic management services.
Recommendation
Update Klaw to version 2.10.4 or later which includes the fix.
Original NVD description (English source)
Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to version 2.10.4, a vulnerability exists in the user registration and login mechanisms due to inconsistent handling of username case sensitivity, leading to a targeted Denial of Service (DoS) and complete account lockout. This issue has been patched in version 2.10.4.