SQL Injection in Clustering Communication (Hybrid Mode)
A SQL Injection (SQLi) affects the Kong Gateway (Enterprise and Open Source) clustering communication logic when operating in Hybrid Mode. The issue can be triggered by sending specially crafted RPC requests to the Control Plane (CP), leading to potential unauthorized database access. Leveraging the issue requires network access to the Control Plane’s clustering port and a valid client certificate and key.
CVE-2026-1907
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-1907
Kong Enterprise Gateway
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Kong Gateway
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"vendor": "Kong",
"product": "Kong Enterprise Gateway",
"versions": [
{
"status": "affected",
"version": "3.10.0.0",
"lessThan": "3.10.0.9",
"versionType": "kong ee gateway 3.10"
},
{
"status": "affected",
"version": "3.11.0.0",
"lessThan": "3.11.0.8",
"versionType": "kong ee gateway 3.11"
},
{
"status": "affected",
"version": "3.12.0.0",
"lessThan": "3.12.0.4",
"versionType": "kong ee gateway 3.12"
},
{
"status": "affected",
"version": "3.13.0.0",
"lessThan": "3.13.0.2",
"versionType": "kong ee gateway 3.13"
}
],
"platforms": [
"Linux"
],
"packageName": "kong-ee",
"defaultStatus": "unaffected"
},
{
"repo": "https://github.com/Kong/kong",
"vendor": "Kong",
"product": "Kong Gateway",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "3.9.4",
"versionType": "Kong Gateway 3.4"
}
],
"packageName": "kong",
"defaultStatus": "unaffected"
}
]- Related CVEs
- CVE-2026-1907
Source reference:
/cveMetadata/cveId
Publisher severity
high
Source reference: /containers/cna/metrics
- Event
- #29978 · Revision 1
- Added to Heist Feed
- Publisher date