CVE-2026-23529

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-23529", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-01-13T18:22:43.981Z", "datePublished": "2026-01-16T16:53:17.830Z", "dateUpdated": "2026-01-16T17:24:03.843Z"}, "containers": {"cna": {"title": "Arbitrary File Read in Google BigQuery Sink connector", "problemTypes": [{"descriptions": [{"cweId": "CWE-73", "lang": "en", "description": "CWE-73: External Control of File Name or Path", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-918", "lang": "en", "description": "CWE-918: Server-Side Request Forgery (SSRF)", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.7, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/Aiven-Open/bigquery-connector-for-apache-kafka/security/advisories/GHSA-3mg8-2g53-5gj4", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/Aiven-Open/bigquery-connector-for-apache-kafka/security/advisories/GHSA-3mg8-2g53-5gj4"}, {"name": "https://github.com/Aiven-Open/bigquery-connector-for-apache-kafka/commit/20ea3921c6fe72d605a033c1943b20f49eaba981", "tags": ["x_refsource_MISC"], "url": "https://github.com/Aiven-Open/bigquery-connector-for-apache-kafka/commit/20ea3921c6fe72d605a033c1943b20f49eaba981"}, {"name": "https://docs.cloud.google.com/support/bulletins#gcp-2025-005", "tags": ["x_refsource_MISC"], "url": "https://docs.cloud.google.com/support/bulletins#gcp-2025-005"}, {"name": "https://github.com/Aiven-Open/bigquery-connector-for-apache-kafka/releases/tag/v2.11.0", "tags": ["x_refsource_MISC"], "url": "https://github.com/Aiven-Open/bigquery-connector-for-apache-kafka/releases/tag/v2.11.0"}], "affected": [{"vendor": "Aiven-Open", "product": "bigquery-connector-for-apache-kafka", "versions": [{"version": "< 2.11.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-01-16T16:53:17.830Z"}, "descriptions": [{"lang": "en", "value": "Kafka Connect BigQuery Connector is an implementation of a sink connector from Apache Kafka to Google BigQuery. Prior to 2.11.0, there is an arbitrary file read in Google BigQuery Sink connector. Aiven's Google BigQuery Kafka Connect Sink connector requires Google Cloud credential configurations for authentication to BigQuery services. During connector configuration, users can supply credential JSON files that are processed by Google authentication libraries. The service fails to validate externally-sourced credential configurations before passing them to the authentication libraries. An attacker can exploit this by providing a malicious credential configuration containing crafted credential_source.file paths or credential_source.url endpoints, resulting in arbitrary file reads or SSRF attacks."}], "source": {"advisory": "GHSA-3mg8-2g53-5gj4", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-01-16T17:23:56.217442Z", "id": "CVE-2026-23529", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-16T17:24:03.843Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-23529", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-01-16T17:23:56.217442Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-16T17:23:59.008Z"}}], "cna": {"title": "Arbitrary File Read in Google BigQuery Sink connector", "source": {"advisory": "GHSA-3mg8-2g53-5gj4", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.7, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "Aiven-Open", "product": "bigquery-connector-for-apache-kafka", "versions": [{"status": "affected", "version": "< 2.11.0"}]}], "references": [{"url": "https://github.com/Aiven-Open/bigquery-connector-for-apache-kafka/security/advisories/GHSA-3mg8-2g53-5gj4", "name": "https://github.com/Aiven-Open/bigquery-connector-for-apache-kafka/security/advisories/GHSA-3mg8-2g53-5gj4", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/Aiven-Open/bigquery-connector-for-apache-kafka/commit/20ea3921c6fe72d605a033c1943b20f49eaba981", "name": "https://github.com/Aiven-Open/bigquery-connector-for-apache-kafka/commit/20ea3921c6fe72d605a033c1943b20f49eaba981", "tags": ["x_refsource_MISC"]}, {"url": "https://docs.cloud.google.com/support/bulletins#gcp-2025-005", "name": "https://docs.cloud.google.com/support/bulletins#gcp-2025-005", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/Aiven-Open/bigquery-connector-for-apache-kafka/releases/tag/v2.11.0", "name": "https://github.com/Aiven-Open/bigquery-connector-for-apache-kafka/releases/tag/v2.11.0", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Kafka Connect BigQuery Connector is an implementation of a sink connector from Apache Kafka to Google BigQuery. Prior to 2.11.0, there is an arbitrary file read in Google BigQuery Sink connector. Aiven's Google BigQuery Kafka Connect Sink connector requires Google Cloud credential configurations for authentication to BigQuery services. During connector configuration, users can supply credential JSON files that are processed by Google authentication libraries. The service fails to validate externally-sourced credential configurations before passing them to the authentication libraries. An attacker can exploit this by providing a malicious credential configuration containing crafted credential_source.file paths or credential_source.url endpoints, resulting in arbitrary file reads or SSRF attacks."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-73", "description": "CWE-73: External Control of File Name or Path"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-918", "description": "CWE-918: Server-Side Request Forgery (SSRF)"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-01-16T16:53:17.830Z"}}}, "cveMetadata": {"cveId": "CVE-2026-23529", "state": "PUBLISHED", "dateUpdated": "2026-01-16T17:24:03.843Z", "dateReserved": "2026-01-13T18:22:43.981Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-01-16T16:53:17.830Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "bigquery-connector-for-apache-kafka", "vendor": "Aiven-Open", "versions": [{"status": "affected", "version": "< 2.11.0"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Kafka Connect BigQuery Connector is an implementation of a sink connector from Apache Kafka to Google BigQuery. Prior to 2.11.0, there is an arbitrary file read in Google BigQuery Sink connector. Aiven's Google BigQuery Kafka Connect Sink connector requires Google Cloud credential configurations for authentication to BigQuery services. During connector configuration, users can supply credential JSON files that are processed by Google authentication libraries. The service fails to validate externally-sourced credential configurations before passing them to the authentication libraries. An attacker can exploit this by providing a malicious credential configuration containing crafted credential_source.file paths or credential_source.url endpoints, resulting in arbitrary file reads or SSRF attacks."}, {"lang": "es", "value": "El Conector de Kafka Connect para BigQuery es una implementaci\u00f3n de un conector de sumidero de Apache Kafka a Google BigQuery. Antes de la versi\u00f3n 2.11.0, existe una lectura arbitraria de archivos en el conector de sumidero de Google BigQuery. El conector de sumidero de Kafka Connect para Google BigQuery de Aiven requiere configuraciones de credenciales de Google Cloud para la autenticaci\u00f3n a los servicios de BigQuery. Durante la configuraci\u00f3n del conector, los usuarios pueden proporcionar archivos JSON de credenciales que son procesados por las librer\u00edas de autenticaci\u00f3n de Google. El servicio no valida las configuraciones de credenciales de origen externo antes de pasarlas a las librer\u00edas de autenticaci\u00f3n. Un atacante puede explotar esto al proporcionar una configuraci\u00f3n de credenciales maliciosa que contenga rutas credential_source.file manipuladas o puntos finales credential_source.url, lo que resulta en lecturas arbitrarias de archivos o ataques SSRF."}], "id": "CVE-2026-23529", "lastModified": "2026-06-17T10:21:44.070", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.7, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.1, "impactScore": 4.0, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-23529", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-01-16T17:23:56.217442Z", "version": "2.0.3"}}]}, "published": "2026-01-16T17:15:54.783", "references": [{"source": "security-advisories@github.com", "url": "https://docs.cloud.google.com/support/bulletins#gcp-2025-005"}, {"source": "security-advisories@github.com", "url": "https://github.com/Aiven-Open/bigquery-connector-for-apache-kafka/commit/20ea3921c6fe72d605a033c1943b20f49eaba981"}, {"source": "security-advisories@github.com", "url": "https://github.com/Aiven-Open/bigquery-connector-for-apache-kafka/releases/tag/v2.11.0"}, {"source": "security-advisories@github.com", "url": "https://github.com/Aiven-Open/bigquery-connector-for-apache-kafka/security/advisories/GHSA-3mg8-2g53-5gj4"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-73"}, {"lang": "en", "value": "CWE-918"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T16:02:58.148753+00:00", "value": {"mitigation_remediation": ["Apply the v2.11.0 patch or newer to the Aiven BigQuery Connector; this patch fixes the CWE\u201173 path traversal and CWE\u2011918 SSRF issues.", "If patching is delayed, disable the use of external credential_source.file or credential_source.url entries in the connector configuration until a secure version is deployed", "Implement input validation to mitigate CWE\u201173 and CWE\u2011918 weaknesses by strictly enforcing that only trusted credential_source.file paths and URLs are accepted, and by sanitizing any user supplied data before passing it to Google authentication libraries."], "summary": {"action": "Patch Now", "impact": "Arbitrary File Read"}, "threat_synthesis": {"affected_systems": "The vulnerability affects the Aiven-Open:bigquery-connector-for-apache-kafka product. All released connector versions before v2.11.0 are susceptible. Users should verify their deployed connector version and update to v2.11.0 or later to remove the flaw.", "description_and_impact": "Kafka Connect BigQuery Connector versions prior to 2.11.0 allow an attacker to supply a malicious credential configuration when setting up the connector. The connector forwards the JSON credential file\u2014including any credential_source.file paths or credential_source.url entries\u2014to Google authentication libraries without validating the sources. This omission permits the attacker to read arbitrary files from the host or trigger Server\u2011Side Request Forgery against internal or external URLs. The weakness is a path traversal (CWE\u201173) and a SSRF failure (CWE\u2011918).", "risk_and_exploitability": "The CVSS base score is 7.7, indicating a high impact. The EPSS score of less than 1% suggests a low probability of widespread exploitation at present, and the vulnerability is not listed in the CISA KEV catalog. The most likely attack vector occurs during connector configuration, where an attacker with the ability to submit or modify the credential JSON can trigger the read or SSRF. Failing to patch may result in disclosure of sensitive files or unintended network traffic from the connector host."}}}}, "created": "2026-01-19T09:20:58.967851+00:00", "updated": "2026-04-18T16:15:04.594741+00:00", "vendors": ["aiven", "aiven$PRODUCT$bigquery-connector-for-apache-kafka"]}