CVE-2026-13341 — Prompt Injection and Credential Exposure via Untrusted Analytics Data in Kong Konnect MCP
A vulnerability exists in the Kong Konnect Model Context Protocol (MCP) server prior to version 1.0.0, which could allow a remote attacker to perform an indirect prompt injectio…
Published: 2026-07-03 · CVSS: 7.4 · CVSS 3.1
A vulnerability exists in the Kong Konnect Model Context Protocol (MCP) server prior to version 1.0.0, which could allow a remote attacker to perform an indirect prompt injection attack and execute unintended API requests.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7