CVE-2026-76401

Name of the Vulnerable Software and Affected Versions Splunk Connect for Kafka versions prior to 2.2.7

Description An unauthenticated user with access to the Kafka Connect Representational State Transfer (REST) API can cause a denial of service by configuring timestamp extraction using a crafted regular expression and matching event data. This action blocks a Kafka Connect worker thread, which stops event delivery for the affected connector. The issue occurs because the timestamp extraction process evaluates customer-supplied regular expressions without a time limit.

Recommendations Update to version 2.2.7 or later.