GO-2025-4094 kgateway is missing xDS authorization in github.com/kgateway-dev/kgateway

kgateway is missing xDS authorization in github.com/kgateway-dev/kgateway...

CVE-2025-64323 kgateway is missing xDS authorization

kgateway is a Cloud-Native API and AI Gateway. Versions 2.0.4 and below and 2.1.0-agw-cel-rbac through 2.1.0-rc.2 lack authentication, allowing any client with unrestricted network access to the xDS port to retrieve potentially sensitive configuration data including certificate data, backend...