kgateway-dev/kgateway

kgateway-dev/kgateway

GitHubGitHub
GitHubgithub.com
kgateway.devkgateway.dev
Releases1.31K
Frequency2 days 5 hours
Last Release
Stars5.55K
The Cloud-Native API Gateway and AI Gateway
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-64323↗
5.3 MEDIUM—

kgateway is a Cloud-Native API and AI Gateway. Versions 2.0.4 and below and 2.1.0-agw-cel-rbac through 2.1.0-rc.2 lack authentication, allowing any client with unrestricted network access to the xDS port to retrieve potentially sensitive configuration data including certificate data, backend service information, routing rules, and cluster metadata. This issue is solved in versions 2.0.5 and 2.1.0.