Product · kgateway-dev

kgateway

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.3

CVE-2025-64323

kgateway is missing xDS authorization

kgateway is a Cloud-Native API and AI Gateway. Versions 2.0.4 and below and 2.1.0-agw-cel-rbac through 2.1.0-rc.2 lack authentication, allowing any client with unrestricted network access to the xDS port to retrieve potentially sensitive configuration data in…

kgateway-dev kgateway github.com/kgateway-dev/kgateway github.com/kgateway-dev/kgateway/v2 Go

Nov 7, 2025