{"api_version":"1","generated_at":"2026-09-11T16:58:42+00:00","cve":"CVE-2026-18674","urls":{"html":"https://cve.report/CVE-2026-18674","api":"https://cve.report/api/cve/CVE-2026-18674.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-18674","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-18674"},"summary":{"title":"Kong Mesh multi-zone: the global control plane attributes KDS-synced resources by an unvalidated in-band zone identifier","description":"On a Kong Mesh global control plane, resources received over the zone-to-global KDS sync are attributed using the in-band, sender-controlled ControlPlane.Identifier rather than the authenticated zone identity derived from the connection. Authenticated zones can have the global control plane store and re-distribute those resources as belonging to another zone.\n\n\n\nThe result is a cross-zone isolation bypass: the holder of a single enrolled zone's credential can inject, attribute, and overwrite resources in another zone's namespace mesh-wide.\n\n\n\n\nThe root cause lives in Kuma's open-source KDS sync code, which Kong Mesh's control plane is built on.","state":"PUBLISHED","assigner":"Kong","published_at":"2026-08-17 13:16:51","updated_at":"2026-08-31 19:22:43"},"problem_types":["CWE-345","CWE-863","CWE-345 CWE-345 Insufficient Verification of Data Authenticity","CWE-863 CWE-863 Incorrect Authorization"],"metrics":[{"version":"4.0","source":"02762ae7-200e-4b20-9b2b-a77d5b8fc4cb","type":"Secondary","score":"7","severity":"HIGH","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","data":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"HIGH","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}},{"version":"4.0","source":"CNA","type":"CVSS","score":"7","severity":"HIGH","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:L/SI:L/SA:N","data":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":7,"baseSeverity":"HIGH","exploitMaturity":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:L/SI:L/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"}}],"references":[{"url":"https://github.com/kumahq/kuma/pull/17461","name":"https://github.com/kumahq/kuma/pull/17461","refsource":"02762ae7-200e-4b20-9b2b-a77d5b8fc4cb","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://github.com/kumahq/kuma/pull/17458","name":"https://github.com/kumahq/kuma/pull/17458","refsource":"02762ae7-200e-4b20-9b2b-a77d5b8fc4cb","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://github.com/kumahq/kuma/security/advisories/GHSA-m58j-fjmc-h3g4","name":"https://github.com/kumahq/kuma/security/advisories/GHSA-m58j-fjmc-h3g4","refsource":"02762ae7-200e-4b20-9b2b-a77d5b8fc4cb","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://github.com/kumahq/kuma/pull/17456","name":"https://github.com/kumahq/kuma/pull/17456","refsource":"02762ae7-200e-4b20-9b2b-a77d5b8fc4cb","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://github.com/kumahq/kuma/pull/17460","name":"https://github.com/kumahq/kuma/pull/17460","refsource":"02762ae7-200e-4b20-9b2b-a77d5b8fc4cb","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://github.com/kumahq/kuma/pull/17459","name":"https://github.com/kumahq/kuma/pull/17459","refsource":"02762ae7-200e-4b20-9b2b-a77d5b8fc4cb","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://developer.konghq.com/mesh/changelog/","name":"https://developer.konghq.com/mesh/changelog/","refsource":"02762ae7-200e-4b20-9b2b-a77d5b8fc4cb","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://github.com/kumahq/kuma/pull/17462","name":"https://github.com/kumahq/kuma/pull/17462","refsource":"02762ae7-200e-4b20-9b2b-a77d5b8fc4cb","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://github.com/kumahq/kuma/pull/17463","name":"https://github.com/kumahq/kuma/pull/17463","refsource":"02762ae7-200e-4b20-9b2b-a77d5b8fc4cb","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-18674","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-18674","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Kong Inc.","product":"Kong Mesh","version":"affected 2.7.29 semver","platforms":["Linux"]},{"source":"CNA","vendor":"Kong Inc.","product":"Kong Mesh","version":"affected 2.8.0 2.9.19 semver","platforms":["Linux"]},{"source":"CNA","vendor":"Kong Inc.","product":"Kong Mesh","version":"affected 2.10.0 2.11.18 semver","platforms":["Linux"]},{"source":"CNA","vendor":"Kong Inc.","product":"Kong Mesh","version":"affected 2.12.0 2.12.14 semver","platforms":["Linux"]},{"source":"CNA","vendor":"Kong Inc.","product":"Kong Mesh","version":"affected 2.13.0 2.13.10 semver","platforms":["Linux"]},{"source":"CNA","vendor":"Kong Inc.","product":"Kong Mesh","version":"affected 2.14.0 2.14.2 semver","platforms":["Linux"]}],"timeline":[{"source":"CNA","time":"2026-08-01T16:58:00.000Z","lang":"en","value":"Kong Mesh patched releases published"}],"solutions":[{"source":"CNA","title":"","value":"Upgrade to Kong Mesh 2.7.29, 2.9.19, 2.11.18, 2.12.14, 2.13.10 or 2.14.2, whichever matches your release line. In patched versions the global KDS ingest path attributes synced resources by the authenticated connection identity instead of the in-band field.","time":"","lang":"en"}],"workarounds":[{"source":"CNA","title":"","value":"Restrict which zones may enroll and protect zone tokens. No configuration flag disables the in-band attribution, so upgrading is the only fix.","time":"","lang":"en"}],"exploits":[],"credits":[{"source":"CNA","value":"johanw","lang":"en"}],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2026","cve_id":"18674","cve":"CVE-2026-18674","epss":"0.002340000","percentile":"0.142020000","score_date":"2026-09-01","updated_at":"2026-09-02 00:10:39"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-18674","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-08-17T14:46:37.265087Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-08-17T14:46:48.378Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"defaultStatus":"unaffected","modules":["kuma-cp"],"platforms":["Linux"],"product":"Kong Mesh","vendor":"Kong Inc.","versions":[{"lessThan":"2.7.29","status":"affected","version":"0","versionType":"semver"},{"lessThan":"2.9.19","status":"affected","version":"2.8.0","versionType":"semver"},{"lessThan":"2.11.18","status":"affected","version":"2.10.0","versionType":"semver"},{"lessThan":"2.12.14","status":"affected","version":"2.12.0","versionType":"semver"},{"lessThan":"2.13.10","status":"affected","version":"2.13.0","versionType":"semver"},{"lessThan":"2.14.2","status":"affected","version":"2.14.0","versionType":"semver"}]}],"configurations":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>You are affected only if you run a multi-zone deployment of Kong Mesh. If a threat actor controls, or holds a valid zone token for, at least one enrolled zone they can leverage the issue.&nbsp;</p><p><span>You are not affected if you run a single-zone deployment.</span></p>"}],"value":"You are affected only if you run a multi-zone deployment of Kong Mesh. If a threat actor controls, or holds a valid zone token for, at least one enrolled zone they can leverage the issue. \n\n\n\nYou are not affected if you run a single-zone deployment."}],"credits":[{"lang":"en","type":"finder","value":"johanw"}],"descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>On a Kong Mesh global control plane, resources received over the zone-to-global KDS sync are attributed using the in-band, sender-controlled <code>ControlPlane.Identifier</code> rather than the authenticated zone identity derived from the connection. Authenticated zones can have the&nbsp;global control plane store and re-distribute those resources as belonging to another zone.</p><p>The result is a cross-zone isolation bypass: the holder of a single enrolled zone's credential can inject, attribute, and overwrite resources in another zone's namespace mesh-wide.<br></p><p>The root cause lives in Kuma's open-source KDS sync code, which Kong Mesh's control plane is built on.<br></p>"}],"value":"On a Kong Mesh global control plane, resources received over the zone-to-global KDS sync are attributed using the in-band, sender-controlled ControlPlane.Identifier rather than the authenticated zone identity derived from the connection. Authenticated zones can have the global control plane store and re-distribute those resources as belonging to another zone.\n\n\n\nThe result is a cross-zone isolation bypass: the holder of a single enrolled zone's credential can inject, attribute, and overwrite resources in another zone's namespace mesh-wide.\n\n\n\n\nThe root cause lives in Kuma's open-source KDS sync code, which Kong Mesh's control plane is built on."}],"impacts":[{"descriptions":[{"lang":"en","value":"Cross-zone isolation bypass"}]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":7,"baseSeverity":"HIGH","exploitMaturity":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:L/SI:L/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:L/SI:L/SA:N"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-345","description":"CWE-345 Insufficient Verification of Data Authenticity","lang":"en","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-863","description":"CWE-863 Incorrect Authorization","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-08-17T12:08:11.470Z","orgId":"02762ae7-200e-4b20-9b2b-a77d5b8fc4cb","shortName":"Kong"},"references":[{"name":"Upstream advisory GHSA-m58j-fjmc-h3g4","tags":["vendor-advisory"],"url":"https://github.com/kumahq/kuma/security/advisories/GHSA-m58j-fjmc-h3g4"},{"name":"kumahq/kuma#17456 (master)","tags":["patch"],"url":"https://github.com/kumahq/kuma/pull/17456"},{"name":"kumahq/kuma#17458 (release-2.14 backport)","tags":["patch"],"url":"https://github.com/kumahq/kuma/pull/17458"},{"name":"kumahq/kuma#17461 (release-2.13 backport)","tags":["patch"],"url":"https://github.com/kumahq/kuma/pull/17461"},{"name":"kumahq/kuma#17463 (release-2.12 backport)","tags":["patch"],"url":"https://github.com/kumahq/kuma/pull/17463"},{"name":"kumahq/kuma#17462 (release-2.11 backport)","tags":["patch"],"url":"https://github.com/kumahq/kuma/pull/17462"},{"name":"kumahq/kuma#17460 (release-2.9 backport)","tags":["patch"],"url":"https://github.com/kumahq/kuma/pull/17460"},{"name":"kumahq/kuma#17459 (release-2.7 backport)","tags":["patch"],"url":"https://github.com/kumahq/kuma/pull/17459"},{"name":"Kong Mesh Changelog","tags":["release-notes"],"url":"https://developer.konghq.com/mesh/changelog/"}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>Upgrade to Kong Mesh 2.7.29, 2.9.19, 2.11.18, 2.12.14, 2.13.10 or 2.14.2, whichever matches your release line. In patched versions the global KDS ingest path attributes synced resources by the authenticated connection identity instead of the in-band field.</p>"}],"value":"Upgrade to Kong Mesh 2.7.29, 2.9.19, 2.11.18, 2.12.14, 2.13.10 or 2.14.2, whichever matches your release line. In patched versions the global KDS ingest path attributes synced resources by the authenticated connection identity instead of the in-band field."}],"source":{"discovery":"EXTERNAL"},"timeline":[{"lang":"en","time":"2026-08-01T16:58:00.000Z","value":"Kong Mesh patched releases published"}],"title":"Kong Mesh multi-zone: the global control plane attributes KDS-synced resources by an unvalidated in-band zone identifier","workarounds":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>Restrict which zones may enroll and protect zone tokens. No configuration flag disables the in-band attribution, so upgrading is the only fix.</p>"}],"value":"Restrict which zones may enroll and protect zone tokens. No configuration flag disables the in-band attribution, so upgrading is the only fix."}],"x_generator":{"engine":"Vulnogram 1.0.4"}}},"cveMetadata":{"assignerOrgId":"02762ae7-200e-4b20-9b2b-a77d5b8fc4cb","assignerShortName":"Kong","cveId":"CVE-2026-18674","datePublished":"2026-08-17T12:08:11.470Z","dateReserved":"2026-08-03T15:20:40.972Z","dateUpdated":"2026-08-17T14:46:48.378Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-08-17 13:16:51","lastModifiedDate":"2026-08-31 19:22:43","problem_types":["CWE-345","CWE-863","CWE-345 CWE-345 Insufficient Verification of Data Authenticity","CWE-863 CWE-863 Incorrect Authorization"],"metrics":{"cvssMetricV40":[{"source":"02762ae7-200e-4b20-9b2b-a77d5b8fc4cb","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"HIGH","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-17T14:46:37.265087Z","id":"CVE-2026-18674","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"18674","Ordinal":"1","Title":"Kong Mesh multi-zone: the global control plane attributes KDS-sy","CVE":"CVE-2026-18674","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"18674","Ordinal":"1","NoteData":"On a Kong Mesh global control plane, resources received over the zone-to-global KDS sync are attributed using the in-band, sender-controlled ControlPlane.Identifier rather than the authenticated zone identity derived from the connection. Authenticated zones can have the global control plane store and re-distribute those resources as belonging to another zone.\n\n\n\nThe result is a cross-zone isolation bypass: the holder of a single enrolled zone's credential can inject, attribute, and overwrite resources in another zone's namespace mesh-wide.\n\n\n\n\nThe root cause lives in Kuma's open-source KDS sync code, which Kong Mesh's control plane is built on.","Type":"Description","Title":"Kong Mesh multi-zone: the global control plane attributes KDS-sy"}]}}}