KongHQ vulnerabilities
We track 2 vulnerabilities in KongHQ products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 3, 2026.
2vulnerabilities
0critical
2high
0exploited
7.6average CVSS score
Latest KongHQ vulnerabilities
- 7.4 High severity
A vulnerability exists in the Kong Konnect Model Context Protocol (MCP) server prior to…
A vulnerability exists in the Kong Konnect Model Context Protocol (MCP) server prior to version 1.0.0, which could allow a remote attacker to perform an indirect prompt injection attack and execute unintended API requests.
- 7.8 High severity
macos: Process Control
Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permissions, by using the DYLD_INSERT_LIBRARIES environment variable.