Junglewise Threat Intelligence

GO-2026-5010 - Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.

Severity: info · Published 2026-05-20

Technologies: github.com/kong/kubernetes-ingress-controller/v3 (Go), github.com/kong/kubernetes-ingress-controller/v2 (Go), github.com/kong/kubernetes-ingress-controller (Go). Vendors: Go.

Executive brief

Kong Ingress Controller for Kubernetes (KIC): Secret-backed plugin configurations leak through non-sensitive diagnostics endpoint in github.com/kong/kubernetes-ingress-controller

Affected products

  • Go github.com/kong/kubernetes-ingress-controller/v3
  • Go github.com/kong/kubernetes-ingress-controller/v2
  • Go github.com/kong/kubernetes-ingress-controller

Related threats