Redpanda Connect versions 4.39 through 4.110 expose a management HTTP API on 0.0.0.0:4195 without authentication when running in streams mode. An attacker who can reach TCP port 4195 can post a malicious pipeline definition that includes code‑executing processors such as command, subprocess, ffi, or unsafe sql_raw. The attacker thereby gains arbitrary code execution on the host with the privileges of the Redpanda Connect service account, enabling full host compromise, credential theft, and data exfiltration with no user interaction or credentials required.

Affected vendors and products include Redpanda Data:Connect. Vulnerable releases are Redpanda Connect 4.39 to 4.110. Starting with release 4.111 the API endpoint is opt‑in, so these versions are no longer vulnerable by default; however, if the management API is manually enabled via the --bind-http flag, RCE remains possible.

The attack vector is network access to TCP 4195, with no authentication required. Because the vulnerability leads directly to arbitrary code execution, it carries a very high risk. No EPSS score is currently available and the vulnerability is not listed in the CISA KEV catalog, but the absence of authentication combined with a remote code execution payload indicates a high exploitation probability in practice.