{"answers":{"affected":"11 open source packages ship an affected version, including github.com/kong/kubernetes-ingress-controller/v3, github.com/kong/kubernetes-ingress-controller and github.com/kong/kubernetes-ingress-controller/v2.","exploited":"There is no known exploitation of GHSA-m23h-6mwm-39m8 in the wild and no public exploit code.","fix":"Upgrade github.com/kong/kubernetes-ingress-controller/v3 to a fixed version for your release line: 3.4.14 or 3.5.7.","what":"GHSA-m23h-6mwm-39m8 is a missing authorization vulnerability in github.com/kong/kubernetes-ingress-controller, published on 19 May 2026. Any signed-in user can exploit it over the network, with no action from the victim."},"fix_prompt":"Check this codebase for GHSA-m23h-6mwm-39m8 and fix it if it is affected.\n\nWhat it is: GHSA-m23h-6mwm-39m8 is a missing authorization vulnerability in github.com/kong/kubernetes-ingress-controller, published on 19 May 2026. Any signed-in user can exploit it over the network, with no action from the victim.\nExploitation: There is no known exploitation of GHSA-m23h-6mwm-39m8 in the wild and no public exploit code.\n\nAffected packages and fixed versions:\n- github.com/kong/kubernetes-ingress-controller/v3 (Go): affected all versions; fixed in 3.4.14, 3.5.7\n- github.com/kong/kubernetes-ingress-controller/v3 (Go): affected all versions; fixed in 3.4.14\n- github.com/kong/kubernetes-ingress-controller/v3 (Go): affected all versions; fixed in 3.4.14\n- github.com/kong/kubernetes-ingress-controller/v3 (Go): affected from 3.5.0; fixed in 3.5.7\n- github.com/kong/kubernetes-ingress-controller/v3 (Go): affected from 3.5.0; fixed in 3.5.7\n- github.com/kong/kubernetes-ingress-controller (Go): affected all versions; no fix listed\n- github.com/kong/kubernetes-ingress-controller (Go): affected all versions up to 1.3.4; no fix listed\n- github.com/kong/kubernetes-ingress-controller (Go): affected all versions up to 1.3.4; no fix listed\n- github.com/kong/kubernetes-ingress-controller/v2 (Go): affected all versions; no fix listed\n- github.com/kong/kubernetes-ingress-controller/v2 (Go): affected all versions up to 2.12.8; no fix listed\n- github.com/kong/kubernetes-ingress-controller/v2 (Go): affected all versions up to 2.12.8; no fix listed\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/GHSA-m23h-6mwm-39m8/ (Markdown: https://insights.sbomify.com/GHSA-m23h-6mwm-39m8/index.md)","id":"GHSA-m23h-6mwm-39m8","markdown":"https://insights.sbomify.com/GHSA-m23h-6mwm-39m8/index.md","name":"GHSA-m23h-6mwm-39m8","record":{"aliases":["GO-2026-5485"],"analysis":{"component_type":"container_or_infrastructure","fix_type":"configuration_change","impacts":["data_read"],"network_reachable":"yes","non_default_config":false,"product_category":"Kubernetes ingress controller","requires_auth":"low_privilege","summary":"Low-privileged users can exfiltrate TLS secrets from other namespaces by creating Gateways in managed mode, bypassing ReferenceGrant restrictions.","user_interaction":"not_required","vuln_class":"missing_authorization"},"analysis_generated_by":"qwen3.8-flash-next","assigner":null,"cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"## Summary\n\nA vulnerability in the Kong Ingress Controller (KIC) allows for the unauthorized exfiltration of TLS certificates and private keys across Kubernetes namespace boundaries. In \"managed\" mode (where the `GatewayClass` lacks an unmanaged annotation), the Gateway TLS translator skips critical status checks. This bypass allows the translator to fetch Secrets from any namespace KIC watches, even when a `ReferenceGrant` explicitly denies access or is missing.\n\nAn actor with RBAC permissions to create or modify Gateways in a low-privileged namespace can reference a Secret in a high-privileged namespace, causing KIC to \"leak\" that Secret's sensitive private key material into the Kong dataplane configuration.\n\n## Am I affected?\n\nYou are affected if all of these hold:\n1. You are using Kong Ingress Controller with the **Gateway API**.\n2. Your `GatewayClass` is operating in **managed mode** (default behavior, no unmanaged annotation).\n3. KIC is configured to **watch multiple namespaces** (multi-tenant environment).\n4. Users have RBAC permissions to `create` or `update` `gateways.gateway.networking.k8s.io` in their own namespaces.\n\nYou are not affected if any of this:\n- You only use KIC for `Ingress` resources (not Gateway API).\n- Your `GatewayClass` uses the `konghq.com/gateway-unmanaged` annotation.\n- KIC is restricted via RBAC or configuration to only watch a single namespace.\n- You have strictly limited Gateway creation/modification permissions to trusted cluster administrators only.\n\n## Mitigation\n\n1. **Add unmanaged gateway annotation**: add the `konghq.com/gateway-unmanaged` annotation to your `GatewayClass`\n\n### Additional best practicies\n\n1. **Restrict Gateway RBAC**: Limit the ability to create or modify Gateway resources to high-trust administrative users until a patch is applied.\n2. **Namespace Isolation**: If possible, limit the namespaces KIC is permitted to watch using the `WATCH_NAMESPACE` environment variable or specific RBAC RoleBindings.\n\n## Fix\n\nThe fix mandates `ReferenceGrant` validation for all cross-namespace certificate references. By requiring a `Programmed: True` listener status, the translator now strictly authorizes external Secret access while maintaining default access for same-namespace certificates, effectively closing the exfiltration vector.\n\nFixed in [#7920](https://github.com/Kong/kubernetes-ingress-controller/pull/7920), with backports to supported release branches in [#7921](https://github.com/Kong/kubernetes-ingress-controller/pull/7921) and [#7922](https://github.com/Kong/kubernetes-ingress-controller/pull/7922).\n\nUpgrade to one of the following patched versions (or later):\n- **3.4.14**\n- **3.5.7**\n\n## CVSS\n\n`CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:P` = **5.6 Medium**","ecosystems":["Go"],"exploits":{"exploitdb":null,"first_seen":null,"github_poc":null,"max_poc_stars":null,"metasploit":null,"nuclei":null,"refs":[],"tier":null},"has_fix":true,"headline":"A vulnerability in the Kong Ingress Controller (KIC) allows for the unauthorized exfiltration of TLS certificates and private key","id":"GHSA-m23h-6mwm-39m8","indexable":true,"kev":null,"kind":"advisory","links":{"ecosystem":"Go","product":null,"products":[],"type":"missing_authorization","year":"2026"},"n_packages":11,"n_references":null,"packages":[{"ecosystem":"Go","fixed":[],"introduced":["0"],"last_affected":[],"package":"github.com/kong/kubernetes-ingress-controller","purl":"pkg:golang/github.com/kong/kubernetes-ingress-controller","source":"GO-2026-5485"},{"ecosystem":"Go","fixed":[],"introduced":["0"],"last_affected":["1.3.4"],"package":"github.com/kong/kubernetes-ingress-controller","purl":null,"source":"GHSA-m23h-6mwm-39m8"},{"ecosystem":"Go","fixed":[],"introduced":["0"],"last_affected":["1.3.4"],"package":"github.com/kong/kubernetes-ingress-controller","purl":"pkg:golang/github.com/kong/kubernetes-ingress-controller","source":"GHSA-m23h-6mwm-39m8"},{"ecosystem":"Go","fixed":[],"introduced":["0"],"last_affected":[],"package":"github.com/kong/kubernetes-ingress-controller/v2","purl":"pkg:golang/github.com/kong/kubernetes-ingress-controller/v2","source":"GO-2026-5485"},{"ecosystem":"Go","fixed":[],"introduced":["0"],"last_affected":["2.12.8"],"package":"github.com/kong/kubernetes-ingress-controller/v2","purl":null,"source":"GHSA-m23h-6mwm-39m8"},{"ecosystem":"Go","fixed":[],"introduced":["0"],"last_affected":["2.12.8"],"package":"github.com/kong/kubernetes-ingress-controller/v2","purl":"pkg:golang/github.com/kong/kubernetes-ingress-controller/v2","source":"GHSA-m23h-6mwm-39m8"},{"ecosystem":"Go","fixed":["3.4.14","3.5.7"],"introduced":["0","3.5.0"],"last_affected":[],"package":"github.com/kong/kubernetes-ingress-controller/v3","purl":"pkg:golang/github.com/kong/kubernetes-ingress-controller/v3","source":"GO-2026-5485"},{"ecosystem":"Go","fixed":["3.4.14"],"introduced":["0"],"last_affected":[],"package":"github.com/kong/kubernetes-ingress-controller/v3","purl":null,"source":"GHSA-m23h-6mwm-39m8"},{"ecosystem":"Go","fixed":["3.4.14"],"introduced":["0"],"last_affected":[],"package":"github.com/kong/kubernetes-ingress-controller/v3","purl":"pkg:golang/github.com/kong/kubernetes-ingress-controller/v3","source":"GHSA-m23h-6mwm-39m8"},{"ecosystem":"Go","fixed":["3.5.7"],"introduced":["3.5.0"],"last_affected":[],"package":"github.com/kong/kubernetes-ingress-controller/v3","purl":null,"source":"GHSA-m23h-6mwm-39m8"},{"ecosystem":"Go","fixed":["3.5.7"],"introduced":["3.5.0"],"last_affected":[],"package":"github.com/kong/kubernetes-ingress-controller/v3","purl":"pkg:golang/github.com/kong/kubernetes-ingress-controller/v3","source":"GHSA-m23h-6mwm-39m8"}],"products":null,"published":"2026-05-19","related":[],"sources":[{"class":"attribution","licence":"CC BY 4.0","name":"GitHub Advisory Database","prefix":"GHSA"},{"class":"attribution","licence":"CC BY 4.0","name":"Go Vulnerability Database","prefix":"GO"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":null,"updated":null,"vendors":null},"summary":"Low-privileged users can exfiltrate TLS secrets from other namespaces by creating Gateways in managed mode, bypassing ReferenceGrant restrictions.","url":"https://insights.sbomify.com/GHSA-m23h-6mwm-39m8/"}