Security Advisory

CVE-2026-13341

7.4
HIGH

Vulnerability Description

A vulnerability exists in the Kong Konnect Model Context Protocol (MCP) server prior to version 1.0.0, which could allow a remote attacker to perform an indirect prompt injection attack and execute unintended API requests.
Published Date July 3, 2026
Official Source NIST NVD Advisory