CVE Intelligence

Konghq Mcp-konnect vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Konghq Mcp-konnect: 1 record(s), with affected versions and fixes.

CVE-2026-13341 High · 7.4 CWE-20 Jul 3, 2026
Prompt Injection and Credential Exposure via Untrusted Analytics Data in Kong Konnect MCP
A vulnerability exists in the Kong Konnect Model Context Protocol (MCP) server prior to version 1.0.0, which could allow a remote attacker to perform an indirect prompt injection attack and execute unintended API requests.