Read the docs
TI-2026-14415 Aliases CVE-2026-17578GHSA-v6xc-r9wm-438j

Kong Event Gateway AES-GCM nonce reuse due to missing key rotation enforcement

Priority LOW 12CWE-323Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
Present
Impact type
—
Confidentiality · integrity · availability
Low · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

Kong Event Gateway versions 1.0.0 through 1.1.1 and 1.2.0 do not enforce key rotation before reaching NIST SP 800-38D recommended usage limit for AES-GCM encryption keys with random nonces when the AWS IAM encryption feature is enabled. If a producer sends messages at a sustained high rate without key rotation, which only occurs on reboot of the Kong Event Gateway instance, the probability of a nonce collision becomes non-negligible. An authorized consumer who detects a nonce collision can recover parts of plaintext from the affected messages. New versions 1.1.2 and 1.2.1 enforce automatic key rotation before the recommended usage limit is reached.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00244 15th percentileScored 2026-11-07
Fix Fixed Kong Event Gateway (Kong): 1.1.2, 1.2.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Kong Inc.Kong Event Gateway1.0.0 to before 1.1.2; 1.2.0 to before 1.2.11.1.2, 1.2.1Patch availableCNA
  • Kong Event Gateway VendorKong Inc. Affected 1.0.0 to before 1.1.2; 1.2.0 to before 1.2.1 Fixed in 1.1.2, 1.2.1 Patch available CNA

Remediation

  • Fix · CNA Kong Event Gateway (Kong) Fixed in 1.1.2, 1.2.1

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-17578
  2. 2026-10-03 Alias added: GHSA-v6xc-r9wm-438j

References

Other 1

  • TI-2020-17871 The official kong docker images before 1.0.2-alpine (Alpine specific) contain a blank… CVSS 3.1CRITICAL 9.8
  • TI-2025-00925 Arbitrary Code Execution in Kong Insomnia Desktop Application CVSS 4.0CRITICAL 9.3
  • TI-2026-12562 Kong API Gateway Enterprise: SAML Authentication bypass CVSS 4.0HIGH 7.7
  • TI-2026-12561 Kong API Gateway Enterprise: JWT Algorithm-Confusion CVSS 4.0HIGH 7.7
  • TI-2020-18854 Kong lua-multipart multipart.lua is_header redos CVSS 3.1HIGH 7.5
  • TI-2026-70893 SQL injection in Kong Gateway clustering communication CVSS 4.0HIGH 7.5
See all 16 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences