CVE-2026-17578: Reusing a Nonce, Key Pair in Encryption

Kong Event Gateway versions 1.0.0 through 1.1.1 and 1.2.0 do not enforce key rotation before reaching NIST SP 800-38D recommended usage limit for AES-GCM encryption keys with random nonces when the AWS IAM encryption feature is enabled. If a producer sends messages at a sustained high rate withou...

PT-2026-68094

Name of the Vulnerable Software and Affected Versions Kong Event Gateway versions 1.0.0 through 1.1.1 Kong Event Gateway version 1.2.0 Description When the AWS IAM encryption feature is enabled, the software fails to enforce key rotation before reaching the NIST SP 800-38D recommended usage limit...