CVE-2026-17578

The record

Kong Event Gateway versions 1.0.0 through 1.1.1 and 1.2.0 do not enforce key rotation before reaching NIST SP 800-38D recommended usage limit for AES-GCM encryption keys with random nonces when the AWS IAM encryption feature is enabled. If a producer sends messages at a sustained high rate without key rotation, which only occurs on reboot of the Kong Event Gateway instance, the probability of a nonce collision becomes non-negligible. An authorized consumer who detects a nonce collision can recover parts of plaintext from the affected messages. New versions 1.1.2 and 1.2.1 enforce automatic key rotation before the recommended usage limit is reached.

Affected packages

Related vulnerabilities

• CVE-2026-50577 ePA 3.x Integration implements the authorization workflow and writes Medical Information… CWE-323
• CVE-2026-21383 Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping… CWE-323
• CVE-2026-56369 ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the… CWE-323
• CVE-2026-55967 AES-GCM encryption/decryption with extremely large cumulative single message sizes (>64… CWE-323
• CVE-2026-12205 Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to… CWE-323
• CVE-2026-49952 Discuz! CWE-323
• GHSA-qv2q-c278-pch5 ImageMagick: Information Disclosure in PasskeyEncipherImage via AES-CTR nonce reuse CWE-323
• CVE-2026-45028 Astro is a web framework. CWE-323