CVE Intelligence

Konghq vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Konghq products: 2 record(s), with severity, exploitation and fixes.

Kong Gateway 1Mcp-konnect 1

Exploited only (KEV) →

CVE-2026-13341 High · 7.4 CWE-20 Jul 3, 2026
Prompt Injection and Credential Exposure via Untrusted Analytics Data in Kong Konnect MCP
A vulnerability exists in the Kong Konnect Model Context Protocol (MCP) server prior to version 1.0.0, which could allow a remote attacker to perform an indirect prompt injection attack and execute unintended API requests.
CVE-2023-44487 High · 7.5 KEV Urgent · 73 Public exploit CWE-400 Oct 10, 2023
HTTP/2 Rapid Reset Attack Vulnerability
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.