A vulnerability, which was classified as very critical, has been found in Kong Mesh up to 2.13.9/2.14.1. Affected by this issue is some unknown functionality of the component XDS authenticator. The manipulation leads to improper authentication.
This vulnerability is traded as CVE-2026-18677. It is possible to initiate the attack remotely. There is no exploit available.
It is advisable to upgrade the affected component.
