CVE-2026-18674 (GCVE-0-2026-18674)
Vulnerability from cvelistv5
Published
2026-08-17 12:08
Modified
2026-08-17 14:46
Severity ?
VLAI Severity ?
EPSS score ?
Summary
On a Kong Mesh global control plane, resources received over the zone-to-global KDS sync are attributed using the in-band, sender-controlled ControlPlane.Identifier rather than the authenticated zone identity derived from the connection. Authenticated zones can have the global control plane store and re-distribute those resources as belonging to another zone.
The result is a cross-zone isolation bypass: the holder of a single enrolled zone's credential can inject, attribute, and overwrite resources in another zone's namespace mesh-wide.
The root cause lives in Kuma's open-source KDS sync code, which Kong Mesh's control plane is built on.
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-18674",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-17T14:46:37.265087Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-17T14:46:48.378Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"modules": [
"kuma-cp"
],
"platforms": [
"Linux"
],
"product": "Kong Mesh",
"vendor": "Kong Inc.",
"versions": [
{
"lessThan": "2.7.29",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "2.9.19",
"status": "affected",
"version": "2.8.0",
"versionType": "semver"
},
{
"lessThan": "2.11.18",
"status": "affected",
"version": "2.10.0",
"versionType": "semver"
},
{
"lessThan": "2.12.14",
"status": "affected",
"version": "2.12.0",
"versionType": "semver"
},
{
"lessThan": "2.13.10",
"status": "affected",
"version": "2.13.0",
"versionType": "semver"
},
{
"lessThan": "2.14.2",
"status": "affected",
"version": "2.14.0",
"versionType": "semver"
}
]
}
],
"configurations": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eYou are affected only if you run a multi-zone deployment of Kong Mesh. If a threat actor controls, or holds a valid zone token for, at least one enrolled zone they can leverage the issue.\u0026nbsp;\u003c/p\u003e\u003cp\u003e\u003cspan\u003eYou are not affected if you run a single-zone deployment.\u003c/span\u003e\u003c/p\u003e"
}
],
"value": "You are affected only if you run a multi-zone deployment of Kong Mesh. If a threat actor controls, or holds a valid zone token for, at least one enrolled zone they can leverage the issue.\u00a0\n\n\n\nYou are not affected if you run a single-zone deployment."
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "johanw"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eOn a Kong Mesh global control plane, resources received over the zone-to-global KDS sync are attributed using the in-band, sender-controlled \u003ccode\u003eControlPlane.Identifier\u003c/code\u003e rather than the authenticated zone identity derived from the connection. Authenticated zones can have the\u0026nbsp;global control plane store and re-distribute those resources as belonging to another zone.\u003c/p\u003e\u003cp\u003eThe result is a cross-zone isolation bypass: the holder of a single enrolled zone\u0027s credential can inject, attribute, and overwrite resources in another zone\u0027s namespace mesh-wide.\u003cbr\u003e\u003c/p\u003e\u003cp\u003eThe root cause lives in Kuma\u0027s open-source KDS sync code, which Kong Mesh\u0027s control plane is built on.\u003cbr\u003e\u003c/p\u003e"
}
],
"value": "On a Kong Mesh global control plane, resources received over the zone-to-global KDS sync are attributed using the in-band, sender-controlled ControlPlane.Identifier rather than the authenticated zone identity derived from the connection. Authenticated zones can have the\u00a0global control plane store and re-distribute those resources as belonging to another zone.\n\n\n\nThe result is a cross-zone isolation bypass: the holder of a single enrolled zone\u0027s credential can inject, attribute, and overwrite resources in another zone\u0027s namespace mesh-wide.\n\n\n\n\nThe root cause lives in Kuma\u0027s open-source KDS sync code, which Kong Mesh\u0027s control plane is built on."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "Cross-zone isolation bypass"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 7,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:L/SI:L/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:L/SI:L/SA:N"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-345",
"description": "CWE-345 Insufficient Verification of Data Authenticity",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-863",
"description": "CWE-863 Incorrect Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-17T12:08:11.470Z",
"orgId": "02762ae7-200e-4b20-9b2b-a77d5b8fc4cb",
"shortName": "Kong"
},
"references": [
{
"name": "Upstream advisory GHSA-m58j-fjmc-h3g4",
"tags": [
"vendor-advisory"
],
"url": "https://github.com/kumahq/kuma/security/advisories/GHSA-m58j-fjmc-h3g4"
},
{
"name": "kumahq/kuma#17456 (master)",
"tags": [
"patch"
],
"url": "https://github.com/kumahq/kuma/pull/17456"
},
{
"name": "kumahq/kuma#17458 (release-2.14 backport)",
"tags": [
"patch"
],
"url": "https://github.com/kumahq/kuma/pull/17458"
},
{
"name": "kumahq/kuma#17461 (release-2.13 backport)",
"tags": [
"patch"
],
"url": "https://github.com/kumahq/kuma/pull/17461"
},
{
"name": "kumahq/kuma#17463 (release-2.12 backport)",
"tags": [
"patch"
],
"url": "https://github.com/kumahq/kuma/pull/17463"
},
{
"name": "kumahq/kuma#17462 (release-2.11 backport)",
"tags": [
"patch"
],
"url": "https://github.com/kumahq/kuma/pull/17462"
},
{
"name": "kumahq/kuma#17460 (release-2.9 backport)",
"tags": [
"patch"
],
"url": "https://github.com/kumahq/kuma/pull/17460"
},
{
"name": "kumahq/kuma#17459 (release-2.7 backport)",
"tags": [
"patch"
],
"url": "https://github.com/kumahq/kuma/pull/17459"
},
{
"name": "Kong Mesh Changelog",
"tags": [
"release-notes"
],
"url": "https://developer.konghq.com/mesh/changelog/"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eUpgrade to Kong Mesh 2.7.29, 2.9.19, 2.11.18, 2.12.14, 2.13.10 or 2.14.2, whichever matches your release line. In patched versions the global KDS ingest path attributes synced resources by the authenticated connection identity instead of the in-band field.\u003c/p\u003e"
}
],
"value": "Upgrade to Kong Mesh 2.7.29, 2.9.19, 2.11.18, 2.12.14, 2.13.10 or 2.14.2, whichever matches your release line. In patched versions the global KDS ingest path attributes synced resources by the authenticated connection identity instead of the in-band field."
}
],
"source": {
"discovery": "EXTERNAL"
},
"timeline": [
{
"lang": "en",
"time": "2026-08-01T16:58:00.000Z",
"value": "Kong Mesh patched releases published"
}
],
"title": "Kong Mesh multi-zone: the global control plane attributes KDS-synced resources by an unvalidated in-band zone identifier",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eRestrict which zones may enroll and protect zone tokens. No configuration flag disables the in-band attribution, so upgrading is the only fix.\u003c/p\u003e"
}
],
"value": "Restrict which zones may enroll and protect zone tokens. No configuration flag disables the in-band attribution, so upgrading is the only fix."
}
],
"x_generator": {
"engine": "Vulnogram 1.0.4"
}
}
},
"cveMetadata": {
"assignerOrgId": "02762ae7-200e-4b20-9b2b-a77d5b8fc4cb",
"assignerShortName": "Kong",
"cveId": "CVE-2026-18674",
"datePublished": "2026-08-17T12:08:11.470Z",
"dateReserved": "2026-08-03T15:20:40.972Z",
"dateUpdated": "2026-08-17T14:46:48.378Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-18674\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-08-17T14:46:37.265087Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-08-17T14:46:42.858Z\"}}], \"cna\": {\"title\": \"Kong Mesh multi-zone: the global control plane attributes KDS-synced resources by an unvalidated in-band zone identifier\", \"source\": {\"discovery\": \"EXTERNAL\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"johanw\"}], \"impacts\": [{\"descriptions\": [{\"lang\": \"en\", \"value\": \"Cross-zone isolation bypass\"}]}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV4_0\": {\"Safety\": \"NOT_DEFINED\", \"version\": \"4.0\", \"Recovery\": \"NOT_DEFINED\", \"baseScore\": 7, \"Automatable\": \"NOT_DEFINED\", \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"valueDensity\": \"NOT_DEFINED\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:L/SI:L/SA:N\", \"exploitMaturity\": \"NOT_DEFINED\", \"providerUrgency\": \"NOT_DEFINED\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"privilegesRequired\": \"HIGH\", \"subIntegrityImpact\": \"LOW\", \"vulnIntegrityImpact\": \"HIGH\", \"subAvailabilityImpact\": \"NONE\", \"vulnAvailabilityImpact\": \"NONE\", \"subConfidentialityImpact\": \"LOW\", \"vulnConfidentialityImpact\": \"LOW\", \"vulnerabilityResponseEffort\": \"NOT_DEFINED\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:L/SI:L/SA:N\"}]}], \"affected\": [{\"vendor\": \"Kong Inc.\", \"modules\": [\"kuma-cp\"], \"product\": \"Kong Mesh\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"2.7.29\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"2.8.0\", \"lessThan\": \"2.9.19\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"2.10.0\", \"lessThan\": \"2.11.18\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"2.12.0\", \"lessThan\": \"2.12.14\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"2.13.0\", \"lessThan\": \"2.13.10\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"2.14.0\", \"lessThan\": \"2.14.2\", \"versionType\": \"semver\"}], \"platforms\": [\"Linux\"], \"defaultStatus\": \"unaffected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-08-01T16:58:00.000Z\", \"value\": \"Kong Mesh patched releases published\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"Upgrade to Kong Mesh 2.7.29, 2.9.19, 2.11.18, 2.12.14, 2.13.10 or 2.14.2, whichever matches your release line. In patched versions the global KDS ingest path attributes synced resources by the authenticated connection identity instead of the in-band field.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eUpgrade to Kong Mesh 2.7.29, 2.9.19, 2.11.18, 2.12.14, 2.13.10 or 2.14.2, whichever matches your release line. In patched versions the global KDS ingest path attributes synced resources by the authenticated connection identity instead of the in-band field.\u003c/p\u003e\", \"base64\": false}]}], \"references\": [{\"url\": \"https://github.com/kumahq/kuma/security/advisories/GHSA-m58j-fjmc-h3g4\", \"name\": \"Upstream advisory GHSA-m58j-fjmc-h3g4\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://github.com/kumahq/kuma/pull/17456\", \"name\": \"kumahq/kuma#17456 (master)\", \"tags\": [\"patch\"]}, {\"url\": \"https://github.com/kumahq/kuma/pull/17458\", \"name\": \"kumahq/kuma#17458 (release-2.14 backport)\", \"tags\": [\"patch\"]}, {\"url\": \"https://github.com/kumahq/kuma/pull/17461\", \"name\": \"kumahq/kuma#17461 (release-2.13 backport)\", \"tags\": [\"patch\"]}, {\"url\": \"https://github.com/kumahq/kuma/pull/17463\", \"name\": \"kumahq/kuma#17463 (release-2.12 backport)\", \"tags\": [\"patch\"]}, {\"url\": \"https://github.com/kumahq/kuma/pull/17462\", \"name\": \"kumahq/kuma#17462 (release-2.11 backport)\", \"tags\": [\"patch\"]}, {\"url\": \"https://github.com/kumahq/kuma/pull/17460\", \"name\": \"kumahq/kuma#17460 (release-2.9 backport)\", \"tags\": [\"patch\"]}, {\"url\": \"https://github.com/kumahq/kuma/pull/17459\", \"name\": \"kumahq/kuma#17459 (release-2.7 backport)\", \"tags\": [\"patch\"]}, {\"url\": \"https://developer.konghq.com/mesh/changelog/\", \"name\": \"Kong Mesh Changelog\", \"tags\": [\"release-notes\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Restrict which zones may enroll and protect zone tokens. No configuration flag disables the in-band attribution, so upgrading is the only fix.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eRestrict which zones may enroll and protect zone tokens. No configuration flag disables the in-band attribution, so upgrading is the only fix.\u003c/p\u003e\", \"base64\": false}]}], \"x_generator\": {\"engine\": \"Vulnogram 1.0.4\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"On a Kong Mesh global control plane, resources received over the zone-to-global KDS sync are attributed using the in-band, sender-controlled ControlPlane.Identifier rather than the authenticated zone identity derived from the connection. Authenticated zones can have the\\u00a0global control plane store and re-distribute those resources as belonging to another zone.\\n\\n\\n\\nThe result is a cross-zone isolation bypass: the holder of a single enrolled zone\u0027s credential can inject, attribute, and overwrite resources in another zone\u0027s namespace mesh-wide.\\n\\n\\n\\n\\nThe root cause lives in Kuma\u0027s open-source KDS sync code, which Kong Mesh\u0027s control plane is built on.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eOn a Kong Mesh global control plane, resources received over the zone-to-global KDS sync are attributed using the in-band, sender-controlled \u003ccode\u003eControlPlane.Identifier\u003c/code\u003e rather than the authenticated zone identity derived from the connection. Authenticated zones can have the\u0026nbsp;global control plane store and re-distribute those resources as belonging to another zone.\u003c/p\u003e\u003cp\u003eThe result is a cross-zone isolation bypass: the holder of a single enrolled zone\u0027s credential can inject, attribute, and overwrite resources in another zone\u0027s namespace mesh-wide.\u003cbr\u003e\u003c/p\u003e\u003cp\u003eThe root cause lives in Kuma\u0027s open-source KDS sync code, which Kong Mesh\u0027s control plane is built on.\u003cbr\u003e\u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-345\", \"description\": \"CWE-345 Insufficient Verification of Data Authenticity\"}]}, {\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-863\", \"description\": \"CWE-863 Incorrect Authorization\"}]}], \"configurations\": [{\"lang\": \"en\", \"value\": \"You are affected only if you run a multi-zone deployment of Kong Mesh. If a threat actor controls, or holds a valid zone token for, at least one enrolled zone they can leverage the issue.\\u00a0\\n\\n\\n\\nYou are not affected if you run a single-zone deployment.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eYou are affected only if you run a multi-zone deployment of Kong Mesh. If a threat actor controls, or holds a valid zone token for, at least one enrolled zone they can leverage the issue.\u0026nbsp;\u003c/p\u003e\u003cp\u003e\u003cspan\u003eYou are not affected if you run a single-zone deployment.\u003c/span\u003e\u003c/p\u003e\", \"base64\": false}]}], \"providerMetadata\": {\"orgId\": \"02762ae7-200e-4b20-9b2b-a77d5b8fc4cb\", \"shortName\": \"Kong\", \"dateUpdated\": \"2026-08-17T12:08:11.470Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-18674\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-17T14:46:48.378Z\", \"dateReserved\": \"2026-08-03T15:20:40.972Z\", \"assignerOrgId\": \"02762ae7-200e-4b20-9b2b-a77d5b8fc4cb\", \"datePublished\": \"2026-08-17T12:08:11.470Z\", \"assignerShortName\": \"Kong\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…