CVE-2026-24308 | Apache ZooKeeper up to 3.8.5/3.9.4 Client Configuration information disclosure

A vulnerability categorized as problematic has been discovered in Apache ZooKeeper up to 3.8.5/3.9.4. This vulnerability affects unknown code of the component Client Configuration Handler. Such manipulation leads to information disclosure.

This vulnerability is documented as CVE-2026-24308. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.