CVE-2026-78166 | provectus kafka-ui up to 0.7.2 Groovy Code MessagesController.java executeSmartFilterTest code injection (Issue 4567 / EUVD-2026-64686)

A vulnerability was found in provectus kafka-ui up to 0.7.2. It has been declared as critical. The affected element is the function executeSmartFilterTest of the file kafka-ui-api/src/main/java/com/provectus/kafka/ui/controller/MessagesController.java of the component Groovy Code Handler. The manipulation results in code injection. This...