CVE-2026-18673

Katalog CVE

CVSS 5.3 · Medium EPSS 0,46%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor. Skor CVSS 4.0 5.3 (Medium) menurut CNA.

Deskripsi (NVD)

When kuma-dp is configured with the Envoy admin API on a Unix domain socket, which is the default, its readiness service on TCP port 9902 - bound to all interfaces - forwards almost the entire Envoy admin API to any caller that can reach the port, with no authentication. An attacker with network access to a data plane's port 9902, for example another pod on the cluster network, can read Envoy and data plane configuration without credentials: config dumps, cluster and listener lists, stats, and the mesh trust bundle. Exposure is read-only - destructive Envoy admin actions are blocked and private keys are not exposed.

Rincian

Terbit di NVD

12 Agustus 2026

Terakhir diubah

31 Agustus 2026

Status NVD

Awaiting Analysis

CVSS 4.0

5.3 (Medium), sumber CNA
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-306: Missing Authentication for Critical Function

EPSS (30 hari)

0,46% peluang dieksploitasi; lebih tinggi dari 37,8% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://developer.konghq.com/mesh/changelog/
• https://github.com/kumahq/kuma/pull/17317
• https://github.com/kumahq/kuma/pull/17418
• https://github.com/kumahq/kuma/security/advisories/GHSA-r9pv-x3pm-4r2w