CVE-2026-13341: Konghq Mcp-Konnect

High severity, CVSS 7.4. EPSS: 0.4% chance of exploitation in the next 30 days.

A vulnerability exists in the Kong Konnect Model Context Protocol (MCP) server prior to version 1.0.0, which could allow a remote attacker to perform an indirect prompt injection attack and execute unintended API requests.

Affected products

• Konghq Mcp-Konnect: before 1.0.0 (fixed in 1.0.0)

Published 2026-07-03. Last modified 2026-07-06.