PT-2026-110513 · Kong · Kong Gateway
CVSS v4.0
7.5
High
| Vector | AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Kong Gateway versions prior to 3.9.4
Description
A SQL Injection (SQLi) exists in the clustering communication logic of Kong Gateway (Enterprise and Open Source) when operating in Hybrid Mode. An attacker can trigger this issue by sending specially crafted RPC requests to the Control Plane (CP), which may lead to unauthorized database access. Exploitation requires network access to the Control Plane clustering port and a valid client certificate and key.
Recommendations
Update to version 3.9.4.
Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Kong Gateway