CVE-2026-41727

mediumCVSS 6.5covered by 1 sourcefirst seen 2026-06-10

Spring Kafka's retry topic infrastructure did not sufficiently validate user-controlled header values before acting on them. A producer could send a record with a crafted retry_topic-attempts header to supply an out-of-range attempt count and cause the retry topic router to misidentify where the message was in the retry sequence. Affected versions: Spring for Apache Kafka 4.0.0 through 4.0.5; 3.3.0 through 3.3.15; 3.2.0 through 3.2.13; 2.9.0 through 2.9.13; 2.8.0 through 2.8.11.

⚡ Watch CVE-2026-41727

Get an email if CVE-2026-41727 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Low exploitation risk0.24% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 15% of all EPSS-scored CVEs.

Advisory coverage (1)

mediumGHSA-53w6-v7cv-fc9h: Spring for Apache Kafka: Improper Validation of Retry Topic Header Values Leads to Retry …ghsa · 2026-06-10

External references

NVD record for CVE-2026-41727

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-41727 status](https://www.csirts.com/badge/CVE-2026-41727)](https://www.csirts.com/cve/CVE-2026-41727)