CVE-2024-32030

CVE-2024-32030 is a critical post-authentication Remote Code Execution (RCE) vulnerability affecting Kafka UI, an open-source web interface for Apache Kafka management. The vulnerability stems from insecure deserialization via the JMX monitoring feature, which uses the RMI protocol. Attackers can exploit this by connecting Kafka UI to a malicious broker, especially if dynamic configuration is enabled or they have access to the Kafka cluster. This allows for RCE with a CVSS score of 8.1 (High), indicating a network-based attack with high impact on confidentiality, integrity, and availability, but requiring high attack complexity. There is no public exploit code or active exploitation reported, and community discussion is minimal, but the high EPSS score suggests a significant threat. Users are strongly advised to upgrade to version 0.7.2 or later, as no workarounds exist.