CVE-2026-3206: Krakend Krakend-CE

Low severity, CVSS 1.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Improper Resource Shutdown or Release vulnerability in KrakenD, SLU KrakenD-CE (CircuitBreaker modules), KrakenD, SLU KrakenD-EE (CircuitBreaker modules). This issue affects KrakenD-CE: before 2.13.1; KrakenD-EE: before 2.12.5.

Affected products

• Krakend Krakend-CE: before 2.13.1 (fixed in 2.13.1)
• Krakend Krakend-EE: before 2.12.5 (fixed in 2.12.5)

Published 2026-02-25. Last modified 2026-06-17.