CVE-2026-13341 – Prompt Injection and Credential Exposure via Untrusted Analytics Data in Kong Konnect MCP

CVE ID :CVE-2026-13341

Published : July 3, 2026, 10:19 a.m. | 1 hour, 28 minutes ago

Description :A vulnerability exists in the Kong Konnect Model Context Protocol (MCP) server prior to version 1.0.0, which could allow a remote attacker to perform an indirect prompt injection attack and execute unintended API requests.

Severity: 7.4 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…