High severityOSV Advisory· Published Jun 6, 2025· Updated Apr 15, 2026

CVE-2025-49127

Description

Kafbat UI is a web user interface for managing Apache Kafka clusters. An unsafe deserialization vulnerability in version 1.0.0 allows any unauthenticated user to execute arbitrary code on the server. Version 1.1.0 fixes the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Kafbat/Kafka UIOSV
Range: v1.0.0
Kafbat/UIllm-create
Range: =1.0.0

Patches

Vulnerability mechanics

References

github.com/kafbat/kafka-ui/releases/tag/v1.1.0nvd
github.com/kafbat/kafka-ui/security/advisories/GHSA-g3mf-c374-fgh2nvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000