BaseFortify

Publication date: 2025-11-07

Last updated on: 2025-11-12

Assigner: GitHub, Inc.

Description

kgateway is a Cloud-Native API and AI Gateway. Versions 2.0.4 and below and 2.1.0-agw-cel-rbac through 2.1.0-rc.2 lack authentication, allowing any client with unrestricted network access to the xDS port to retrieve potentially sensitive configuration data including certificate data, backend service information, routing rules, and cluster metadata. This issue is solved in versions 2.0.5 and 2.1.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-07

Last Modified

2025-11-12

Generated

2026-07-06

AI Q&A

2025-11-07

EPSS Evaluated

2026-07-05

NVD

CVE-2025-64323

Affected Vendors & Products

Vendor	Product	Version / Range
kgateway	kgateway	2.1.0
kgateway	kgateway	2.0.4
kgateway	kgateway	2.0.1
kgateway	kgateway	2.0.5
kgateway	kgateway	2.0.0
kgateway	kgateway	2.0.3
kgateway	kgateway	2.0.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

This vulnerability exists in kgateway versions 2.0.4 and below and 2.1.0-agw-cel-rbac through 2.1.0-rc.2, where there is a lack of authentication on the xDS port. This allows any client with unrestricted network access to that port to retrieve potentially sensitive configuration data such as certificate data, backend service information, routing rules, and cluster metadata. The issue is fixed in versions 2.0.5 and 2.1.0.

Impact Analysis

The vulnerability can impact you by exposing sensitive configuration data to unauthorized clients. This includes certificate data, backend service information, routing rules, and cluster metadata, which could be used to compromise the security or operation of your systems.

Mitigation Strategies

Upgrade kgateway to version 2.0.5 or 2.1.0 or later, as these versions have fixed the authentication issue allowing unrestricted access to sensitive configuration data.

Hi! I’m here to help you understand CVE-2025-64323. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70