A tenant who can create one custom resource can take over Kafka control-plane objects across every namespace on the cluster. That is the short version of CVE-2026-105312, a CVSS 9.9 critical flaw ...