CVE-2026-17578
Kong Event Gateway AES-GCM nonce reuse due to missing key rotation enforcement
Description
Kong Event Gateway versions 1.0.0 through 1.1.1 and 1.2.0 do not enforce key rotation before reaching NIST SP 800-38D recommended usage limit for AES-GCM encryption keys with random nonces when the AWS IAM encryption feature is enabled. If a producer sends messages at a sustained high rate without key rotation, which only occurs on reboot of the Kong Event Gateway instance, the probability of a nonce collision becomes non-negligible. An authorized consumer who detects a nonce collision can recover parts of plaintext from the affected messages. New versions 1.1.2 and 1.2.1 enforce automatic key rotation before the recommended usage limit is reached.
INFO
Published Date :
Aug. 5, 2026, 11:16 a.m.
Last Modified :
Oct. 23, 2026, 9:10 p.m.
Remotely Exploit :
Yes !
Source :
02762ae7-200e-4b20-9b2b-a77d5b8fc4cb
Affected Products
The following products are affected by CVE-2026-17578
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
No affected product recoded yet
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | |||||
| CVSS 4.0 | LOW | 02762ae7-200e-4b20-9b2b-a77d5b8fc4cb | ||||
| CVSS 4.0 | LOW | 02762ae7-200e-4b20-9b2b-a77d5b8fc4cb |
Solution
- Update Kong Event Gateway to version 1.1.2 or 1.2.1.
- Configure automatic key rotation for encryption keys.
- Monitor key usage to prevent nonce collisions.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-17578.
| URL | Resource |
|---|---|
| https://developer.konghq.com/event-gateway/changelog/ |
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-17578 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-17578
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-17578 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-17578 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Translated by [email protected]
Oct. 23, 2026
Action Type Old Value New Value Added Translation Title: Kong Event Gateway de Kong, Description: Las versiones 1.0.0 a 1.1.1 y 1.2.0 de Kong Event Gateway no aplican la rotación de claves antes de alcanzar el límite de uso recomendado por NIST SP 800-38D para claves de cifrado AES-GCM con nonces aleatorios cuando la función de cifrado de AWS IAM está habilitada. Si un productor envía mensajes a una tasa alta y sostenida sin rotación de claves, lo que solo ocurre al reiniciar la instancia de Kong Event Gateway, la probabilidad de una colisión de nonce se vuelve no despreciable. Un consumidor autorizado que detecta una colisión de nonce puede recuperar partes del texto sin cifrar de los mensajes afectados. Las nuevas versiones 1.1.2 y 1.2.1 aplican la rotación automática de claves antes de que se alcance el límite de uso recomendado. -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Aug. 05, 2026
Action Type Old Value New Value Added SSVC {'id': 'CVE-2026-17578', 'role': 'CISA Coordinator', 'options': [{'exploitation': 'none'}, {'automatable': 'no'}, {'technicalImpact': 'partial'}], 'version': '2.0.3', 'timestamp': '2026-08-05T13:07:06.628504Z'} -
New CVE Received by 02762ae7-200e-4b20-9b2b-a77d5b8fc4cb
Aug. 05, 2026
Action Type Old Value New Value Added Affected [{'vendor': 'Kong', 'product': 'Kong Event Gateway', 'versions': [{'status': 'affected', 'version': '1.0.0', 'lessThan': '1.1.2', 'versionType': 'semver'}, {'status': 'affected', 'version': '1.2.0', 'lessThan': '1.2.1', 'versionType': 'semver'}], 'packageName': 'kong-event-gateway', 'collectionURL': 'https://hub.docker.com/r/kong/kong-event-gateway', 'defaultStatus': 'unaffected'}] Added Description Kong Event Gateway versions 1.0.0 through 1.1.1 and 1.2.0 do not enforce key rotation before reaching NIST SP 800-38D recommended usage limit for AES-GCM encryption keys with random nonces when the AWS IAM encryption feature is enabled. If a producer sends messages at a sustained high rate without key rotation, which only occurs on reboot of the Kong Event Gateway instance, the probability of a nonce collision becomes non-negligible. An authorized consumer who detects a nonce collision can recover parts of plaintext from the affected messages. New versions 1.1.2 and 1.2.1 enforce automatic key rotation before the recommended usage limit is reached. Added CVSS V4.0 AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:X/RE:X/U:Amber Added CWE CWE-323 Added Reference https://developer.konghq.com/event-gateway/changelog/