{ "dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": { "cveId": "CVE-2026-18674", "assignerOrgId": "02762ae7-200e-4b20-9b2b-a77d5b8fc4cb", "state": "PUBLISHED", "assignerShortName": "Kong", "dateReserved": "2026-08-03T15:20:40.972Z", "datePublished": "2026-08-17T12:08:11.470Z", "dateUpdated": "2026-08-17T14:46:48.378Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "02762ae7-200e-4b20-9b2b-a77d5b8fc4cb", "shortName": "Kong", "dateUpdated": "2026-08-17T12:08:11.470Z" }, "title": "Kong Mesh multi-zone: the global control plane attributes KDS-synced resources by an unvalidated in-band zone identifier", "problemTypes": [ { "descriptions": [ { "lang": "en", "cweId": "CWE-345", "description": "CWE-345 Insufficient Verification of Data Authenticity", "type": "CWE" } ] }, { "descriptions": [ { "lang": "en", "cweId": "CWE-863", "description": "CWE-863 Incorrect Authorization", "type": "CWE" } ] } ], "impacts": [ { "descriptions": [ { "lang": "en", "value": "Cross-zone isolation bypass" } ] } ], "affected": [ { "vendor": "Kong Inc.", "product": "Kong Mesh", "platforms": [ "Linux" ], "modules": [ "kuma-cp" ], "versions": [ { "status": "affected", "version": "0", "lessThan": "2.7.29", "versionType": "semver" }, { "status": "affected", "version": "2.8.0", "lessThan": "2.9.19", "versionType": "semver" }, { "status": "affected", "version": "2.10.0", "lessThan": "2.11.18", "versionType": "semver" }, { "status": "affected", "version": "2.12.0", "lessThan": "2.12.14", "versionType": "semver" }, { "status": "affected", "version": "2.13.0", "lessThan": "2.13.10", "versionType": "semver" }, { "status": "affected", "version": "2.14.0", "lessThan": "2.14.2", "versionType": "semver" } ], "defaultStatus": "unaffected" } ], "descriptions": [ { "lang": "en", "value": "On a Kong Mesh global control plane, resources received over the zone-to-global KDS sync are attributed using the in-band, sender-controlled ControlPlane.Identifier rather than the authenticated zone identity derived from the connection. Authenticated zones can have the global control plane store and re-distribute those resources as belonging to another zone.\n\n\n\nThe result is a cross-zone isolation bypass: the holder of a single enrolled zone's credential can inject, attribute, and overwrite resources in another zone's namespace mesh-wide.\n\n\n\n\nThe root cause lives in Kuma's open-source KDS sync code, which Kong Mesh's control plane is built on.", "supportingMedia": [ { "type": "text/html", "base64": false, "value": "

On a Kong Mesh global control plane, resources received over the zone-to-global KDS sync are attributed using the in-band, sender-controlled ControlPlane.Identifier rather than the authenticated zone identity derived from the connection. Authenticated zones can have the global control plane store and re-distribute those resources as belonging to another zone.

The result is a cross-zone isolation bypass: the holder of a single enrolled zone's credential can inject, attribute, and overwrite resources in another zone's namespace mesh-wide.

The root cause lives in Kuma's open-source KDS sync code, which Kong Mesh's control plane is built on.

" } ] } ], "references": [ { "url": "https://github.com/kumahq/kuma/security/advisories/GHSA-m58j-fjmc-h3g4", "name": "Upstream advisory GHSA-m58j-fjmc-h3g4", "tags": [ "vendor-advisory" ] }, { "url": "https://github.com/kumahq/kuma/pull/17456", "name": "kumahq/kuma#17456 (master)", "tags": [ "patch" ] }, { "url": "https://github.com/kumahq/kuma/pull/17458", "name": "kumahq/kuma#17458 (release-2.14 backport)", "tags": [ "patch" ] }, { "url": "https://github.com/kumahq/kuma/pull/17461", "name": "kumahq/kuma#17461 (release-2.13 backport)", "tags": [ "patch" ] }, { "url": "https://github.com/kumahq/kuma/pull/17463", "name": "kumahq/kuma#17463 (release-2.12 backport)", "tags": [ "patch" ] }, { "url": "https://github.com/kumahq/kuma/pull/17462", "name": "kumahq/kuma#17462 (release-2.11 backport)", "tags": [ "patch" ] }, { "url": "https://github.com/kumahq/kuma/pull/17460", "name": "kumahq/kuma#17460 (release-2.9 backport)", "tags": [ "patch" ] }, { "url": "https://github.com/kumahq/kuma/pull/17459", "name": "kumahq/kuma#17459 (release-2.7 backport)", "tags": [ "patch" ] }, { "url": "https://developer.konghq.com/mesh/changelog/", "name": "Kong Mesh Changelog", "tags": [ "release-notes" ] } ], "metrics": [ { "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:L/SI:L/SA:N" } ], "cvssV4_0": { "attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "userInteraction": "NONE", "vulnConfidentialityImpact": "LOW", "subConfidentialityImpact": "LOW", "vulnIntegrityImpact": "HIGH", "subIntegrityImpact": "LOW", "vulnAvailabilityImpact": "NONE", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "HIGH", "baseScore": 7, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:L/SI:L/SA:N" } } ], "configurations": [ { "lang": "en", "value": "You are affected only if you run a multi-zone deployment of Kong Mesh. If a threat actor controls, or holds a valid zone token for, at least one enrolled zone they can leverage the issue. \n\n\n\nYou are not affected if you run a single-zone deployment.", "supportingMedia": [ { "type": "text/html", "base64": false, "value": "

You are affected only if you run a multi-zone deployment of Kong Mesh. If a threat actor controls, or holds a valid zone token for, at least one enrolled zone they can leverage the issue. 

You are not affected if you run a single-zone deployment.

" } ] } ], "workarounds": [ { "lang": "en", "value": "Restrict which zones may enroll and protect zone tokens. No configuration flag disables the in-band attribution, so upgrading is the only fix.", "supportingMedia": [ { "type": "text/html", "base64": false, "value": "

Restrict which zones may enroll and protect zone tokens. No configuration flag disables the in-band attribution, so upgrading is the only fix.

" } ] } ], "solutions": [ { "lang": "en", "value": "Upgrade to Kong Mesh 2.7.29, 2.9.19, 2.11.18, 2.12.14, 2.13.10 or 2.14.2, whichever matches your release line. In patched versions the global KDS ingest path attributes synced resources by the authenticated connection identity instead of the in-band field.", "supportingMedia": [ { "type": "text/html", "base64": false, "value": "

Upgrade to Kong Mesh 2.7.29, 2.9.19, 2.11.18, 2.12.14, 2.13.10 or 2.14.2, whichever matches your release line. In patched versions the global KDS ingest path attributes synced resources by the authenticated connection identity instead of the in-band field.

" } ] } ], "timeline": [ { "time": "2026-08-01T16:58:00.000Z", "lang": "en", "value": "Kong Mesh patched releases published" } ], "credits": [ { "lang": "en", "value": "johanw", "type": "finder" } ], "source": { "discovery": "EXTERNAL" }, "x_generator": { "engine": "Vulnogram 1.0.4" } }, "adp": [ { "metrics": [ { "other": { "type": "ssvc", "content": { "timestamp": "2026-08-17T14:46:37.265087Z", "id": "CVE-2026-18674", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "partial" } ], "role": "CISA Coordinator", "version": "2.0.3" } } } ], "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-17T14:46:48.378Z" } } ] } }