CVE-2026-18673

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-18673", "assignerOrgId": "02762ae7-200e-4b20-9b2b-a77d5b8fc4cb", "state": "PUBLISHED", "assignerShortName": "Kong", "dateReserved": "2026-08-03T15:18:30.454Z", "datePublished": "2026-08-12T18:20:33.205Z", "dateUpdated": "2026-08-13T14:54:00.482Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "02762ae7-200e-4b20-9b2b-a77d5b8fc4cb", "shortName": "Kong", "dateUpdated": "2026-08-12T18:20:33.205Z"}, "title": "Kong Mesh: the kuma-dp readiness service exposes the Envoy admin API without authentication", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-200", "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor", "type": "CWE"}]}, {"descriptions": [{"lang": "en", "cweId": "CWE-306", "description": "CWE-306 Missing Authentication for Critical Function", "type": "CWE"}]}], "impacts": [{"descriptions": [{"lang": "en", "value": "Information Disclosure"}]}], "affected": [{"vendor": "Kong Inc.", "product": "Kong Mesh", "platforms": ["Linux"], "modules": ["kuma-dp"], "versions": [{"status": "affected", "version": "2.14.0", "lessThan": "2.14.2", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "When kuma-dp is configured with the Envoy admin API on a Unix domain socket, which is the default, its readiness service on TCP port 9902 - bound to all interfaces - forwards almost the entire Envoy admin API to any caller that can reach the port, with no authentication.\n\n\n\nAn attacker with network access to a data plane's port 9902, for example another pod on the cluster network, can read Envoy and data plane configuration without credentials: config dumps, cluster and listener lists, stats, and the mesh trust bundle. Exposure is read-only - destructive Envoy admin actions are blocked and private keys are not exposed.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>When <code>kuma-dp</code> is configured with the Envoy admin API on a Unix domain socket, which is the default, its readiness service on TCP port 9902 - bound to all interfaces - forwards almost the entire Envoy admin API to any caller that can reach the port, with no authentication.</p><p>An attacker with network access to a data plane's port 9902, for example another pod on the cluster network, can read Envoy and data plane configuration without credentials: config dumps, cluster and listener lists, stats, and the mesh trust bundle. Exposure is read-only - destructive Envoy admin actions are blocked and private keys are not exposed.</p>"}]}], "references": [{"url": "https://github.com/kumahq/kuma/security/advisories/GHSA-r9pv-x3pm-4r2w", "name": "Upstream advisory GHSA-r9pv-x3pm-4r2w", "tags": ["vendor-advisory"]}, {"url": "https://github.com/kumahq/kuma/pull/17317", "name": "kumahq/kuma#17317 (master)", "tags": ["patch"]}, {"url": "https://github.com/kumahq/kuma/pull/17418", "name": "kumahq/kuma#17418 (release-2.14 backport)", "tags": ["patch"]}, {"url": "https://developer.konghq.com/mesh/changelog/", "name": "Kong Product Security Advisories", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "ADJACENT", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "LOW", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "LOW", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "MEDIUM", "baseScore": 5.3, "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N"}}], "configurations": [{"lang": "en", "value": "You are affected if you run kuma-dp on the 2.14 line with the Envoy admin API on a Unix domain socket (the default) and TCP port 9902 is reachable from the pod or cluster network.\n\n\n\nYou are not affected if:\n\n * You run a release line before 2.14. There the readiness service exposes only /ready.\n * Port 9902 is not reachable by untrusted workloads.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>You are affected if you run <code>kuma-dp</code> on the 2.14 line with the Envoy admin API on a Unix domain socket (the default) and TCP port 9902 is reachable from the pod or cluster network.</p><p>You are not affected if:</p><ul><li>You run a release line before 2.14. There the readiness service exposes only <code>/ready</code>.</li><li>Port 9902 is not reachable by untrusted workloads.</li></ul>"}]}], "workarounds": [{"lang": "en", "value": "Restrict network access to port 9902 to trusted monitoring only, for example with a Kubernetes NetworkPolicy.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Restrict network access to port 9902 to trusted monitoring only, for example with a Kubernetes NetworkPolicy.</p>"}]}], "solutions": [{"lang": "en", "value": "Upgrade to Kong Mesh 2.14.2. In patched versions the readiness reporter serves only /ready; the Envoy admin API stays on the Unix domain socket, which is not reachable over the pod network.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Upgrade to Kong Mesh 2.14.2. In patched versions the readiness reporter serves only <code>/ready</code>; the Envoy admin API stays on the Unix domain socket, which is not reachable over the pod network.</p>"}]}], "timeline": [{"time": "2026-08-01T16:58:00.000Z", "lang": "en", "value": "Kong Mesh 2.14.2 published"}], "credits": [{"lang": "en", "value": "https://hackerone.com/zoom9797", "type": "finder"}], "source": {"discovery": "EXTERNAL"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-13T14:53:48.881667Z", "id": "CVE-2026-18673", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-13T14:54:00.482Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-18673", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-13T14:53:48.881667Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-13T14:53:55.492Z"}}], "cna": {"title": "Kong Mesh: the kuma-dp readiness service exposes the Envoy admin API without authentication", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "https://hackerone.com/zoom9797"}], "impacts": [{"descriptions": [{"lang": "en", "value": "Information Disclosure"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 5.3, "Automatable": "NOT_DEFINED", "attackVector": "ADJACENT", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "LOW", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Kong Inc.", "modules": ["kuma-dp"], "product": "Kong Mesh", "versions": [{"status": "affected", "version": "2.14.0", "lessThan": "2.14.2", "versionType": "semver"}], "platforms": ["Linux"], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2026-08-01T16:58:00.000Z", "value": "Kong Mesh 2.14.2 published"}], "solutions": [{"lang": "en", "value": "Upgrade to Kong Mesh 2.14.2. In patched versions the readiness reporter serves only /ready; the Envoy admin API stays on the Unix domain socket, which is not reachable over the pod network.", "supportingMedia": [{"type": "text/html", "value": "<p>Upgrade to Kong Mesh 2.14.2. In patched versions the readiness reporter serves only <code>/ready</code>; the Envoy admin API stays on the Unix domain socket, which is not reachable over the pod network.</p>", "base64": false}]}], "references": [{"url": "https://github.com/kumahq/kuma/security/advisories/GHSA-r9pv-x3pm-4r2w", "name": "Upstream advisory GHSA-r9pv-x3pm-4r2w", "tags": ["vendor-advisory"]}, {"url": "https://github.com/kumahq/kuma/pull/17317", "name": "kumahq/kuma#17317 (master)", "tags": ["patch"]}, {"url": "https://github.com/kumahq/kuma/pull/17418", "name": "kumahq/kuma#17418 (release-2.14 backport)", "tags": ["patch"]}, {"url": "https://developer.konghq.com/mesh/changelog/", "name": "Kong Product Security Advisories", "tags": ["vendor-advisory"]}], "workarounds": [{"lang": "en", "value": "Restrict network access to port 9902 to trusted monitoring only, for example with a Kubernetes NetworkPolicy.", "supportingMedia": [{"type": "text/html", "value": "<p>Restrict network access to port 9902 to trusted monitoring only, for example with a Kubernetes NetworkPolicy.</p>", "base64": false}]}], "descriptions": [{"lang": "en", "value": "When kuma-dp is configured with the Envoy admin API on a Unix domain socket, which is the default, its readiness service on TCP port 9902 - bound to all interfaces - forwards almost the entire Envoy admin API to any caller that can reach the port, with no authentication.\n\n\n\nAn attacker with network access to a data plane's port 9902, for example another pod on the cluster network, can read Envoy and data plane configuration without credentials: config dumps, cluster and listener lists, stats, and the mesh trust bundle. Exposure is read-only - destructive Envoy admin actions are blocked and private keys are not exposed.", "supportingMedia": [{"type": "text/html", "value": "<p>When <code>kuma-dp</code> is configured with the Envoy admin API on a Unix domain socket, which is the default, its readiness service on TCP port 9902 - bound to all interfaces - forwards almost the entire Envoy admin API to any caller that can reach the port, with no authentication.</p><p>An attacker with network access to a data plane's port 9902, for example another pod on the cluster network, can read Envoy and data plane configuration without credentials: config dumps, cluster and listener lists, stats, and the mesh trust bundle. Exposure is read-only - destructive Envoy admin actions are blocked and private keys are not exposed.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-200", "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-306", "description": "CWE-306 Missing Authentication for Critical Function"}]}], "configurations": [{"lang": "en", "value": "You are affected if you run kuma-dp on the 2.14 line with the Envoy admin API on a Unix domain socket (the default) and TCP port 9902 is reachable from the pod or cluster network.\n\n\n\nYou are not affected if:\n\n * You run a release line before 2.14. There the readiness service exposes only /ready.\n * Port 9902 is not reachable by untrusted workloads.", "supportingMedia": [{"type": "text/html", "value": "<p>You are affected if you run <code>kuma-dp</code> on the 2.14 line with the Envoy admin API on a Unix domain socket (the default) and TCP port 9902 is reachable from the pod or cluster network.</p><p>You are not affected if:</p><ul><li>You run a release line before 2.14. There the readiness service exposes only <code>/ready</code>.</li><li>Port 9902 is not reachable by untrusted workloads.</li></ul>", "base64": false}]}], "providerMetadata": {"orgId": "02762ae7-200e-4b20-9b2b-a77d5b8fc4cb", "shortName": "Kong", "dateUpdated": "2026-08-12T18:20:33.205Z"}}}, "cveMetadata": {"cveId": "CVE-2026-18673", "state": "PUBLISHED", "dateUpdated": "2026-08-13T14:54:00.482Z", "dateReserved": "2026-08-03T15:18:30.454Z", "assignerOrgId": "02762ae7-200e-4b20-9b2b-a77d5b8fc4cb", "datePublished": "2026-08-12T18:20:33.205Z", "assignerShortName": "Kong"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "modules": ["kuma-dp"], "platforms": ["Linux"], "product": "Kong Mesh", "vendor": "Kong Inc.", "versions": [{"lessThan": "2.14.2", "status": "affected", "version": "2.14.0", "versionType": "semver"}]}], "source": "02762ae7-200e-4b20-9b2b-a77d5b8fc4cb"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "When kuma-dp is configured with the Envoy admin API on a Unix domain socket, which is the default, its readiness service on TCP port 9902 - bound to all interfaces - forwards almost the entire Envoy admin API to any caller that can reach the port, with no authentication.\n\n\n\nAn attacker with network access to a data plane's port 9902, for example another pod on the cluster network, can read Envoy and data plane configuration without credentials: config dumps, cluster and listener lists, stats, and the mesh trust bundle. Exposure is read-only - destructive Envoy admin actions are blocked and private keys are not exposed."}, {"lang": "es", "value": "Cuando kuma-dp est\u00e1 configurado con la API de administraci\u00f3n de Envoy en un socket de dominio Unix, que es el predeterminado, su servicio de preparaci\u00f3n en el puerto TCP 9902 - enlazado a todas las interfaces - reenv\u00eda casi toda la API de administraci\u00f3n de Envoy a cualquier llamador que pueda alcanzar el puerto, sin autenticaci\u00f3n.\n\nUn atacante con acceso de red al puerto 9902 de un plano de datos, por ejemplo, otro pod en la red del cl\u00faster, puede leer la configuraci\u00f3n de Envoy y del plano de datos sin credenciales: volcados de configuraci\u00f3n, listas de cl\u00fasteres y oyentes, estad\u00edsticas y el paquete de confianza de la malla. La exposici\u00f3n es de solo lectura: las acciones administrativas destructivas de Envoy est\u00e1n bloqueadas y las claves privadas no est\u00e1n expuestas."}], "id": "CVE-2026-18673", "lastModified": "2026-10-23T19:10:00.167", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "ADJACENT", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "02762ae7-200e-4b20-9b2b-a77d5b8fc4cb", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-18673", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-13T14:53:48.881667Z", "version": "2.0.3"}}]}, "published": "2026-08-12T19:17:30.480", "references": [{"source": "02762ae7-200e-4b20-9b2b-a77d5b8fc4cb", "url": "https://developer.konghq.com/mesh/changelog/"}, {"source": "02762ae7-200e-4b20-9b2b-a77d5b8fc4cb", "url": "https://github.com/kumahq/kuma/pull/17317"}, {"source": "02762ae7-200e-4b20-9b2b-a77d5b8fc4cb", "url": "https://github.com/kumahq/kuma/pull/17418"}, {"source": "02762ae7-200e-4b20-9b2b-a77d5b8fc4cb", "url": "https://github.com/kumahq/kuma/security/advisories/GHSA-r9pv-x3pm-4r2w"}], "sourceIdentifier": "02762ae7-200e-4b20-9b2b-a77d5b8fc4cb", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}, {"lang": "en", "value": "CWE-306"}], "source": "02762ae7-200e-4b20-9b2b-a77d5b8fc4cb", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["linux"], "status": "affected", "versions": {"scheme": "semver", "value": "[2.14.0,2.14.2)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Kong Mesh", "source": "cna", "vendor": "Kong Inc."}, "product": "kong_mesh", "vendor": "konghq"}], "created": "2026-08-13T00:45:02.822606+00:00", "updated": "2026-08-13T09:48:12.391458+00:00", "vendors": ["konghq", "konghq$PRODUCT$kong_mesh"]}