CVE-2026-33557 | Apache Kafka 4.1.0 JWT Token improper authentication

A vulnerability identified as critical has been detected in Apache Kafka 4.1.0. The affected element is an unknown function of the component JWT Token Handler. This manipulation causes improper authentication.

This vulnerability is registered as CVE-2026-33557. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.