Description
A vulnerability exists in the Kong Konnect Model Context Protocol (MCP) server prior to version 1.0.0, which could allow a remote attacker to perform an indirect prompt injection attack and execute unintended API requests.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| KongHQ | mcp-konnect | < 1.0.0 | 1.0.0 |