Skip to contentKong Inc. Gateway Enterprise vulnerabilities
- kong inc. ai gateway, gateway enterprise +1 moreThe proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway...CVE-2026-925586.3 Medium
- kong inc. ai gateway, gateway enterprise +1 moreThe request-callout plugin in Kong Gateway Enterprise and Kong AI Gateway omits callout headers...CVE-2026-1230418.2 High
- kong inc. ai gateway, gateway enterprise +1 moreKong Gateway Enterprise and Kong AI Gateway include decoded CR/LF characters from the request...CVE-2026-924417.8 High
- kong inc. gateway enterprise, ai gateway +1 moreThe SAML plugin in Kong Gateway Enterprise does not enforce AudienceRestriction, allowing a valid...CVE-2026-924397.8 High
- kong inc. gateway enterpriseThe ai-azure-content-safety plugin in Kong Gateway Enterprise skips inspection of request bodies...CVE-2026-964378.2 High
- kong inc. ai gateway, gateway enterprise +1 moreThe caching plugins in Kong Gateway Enterprise and Kong AI Gateway may serve a response cached...CVE-2026-924438.2 High
- kong inc. gateway enterprise, ai gateway +1 moreThe graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise omits the caller's identity...CVE-2026-924428.3 High
- kong inc. ai gateway, gateway enterprise +1 moreThe proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway...CVE-2026-925458.7 High
- kong inc. ai gateway, gateway enterprise +1 moreSQL injection in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway may allow...CVE-2026-925448.7 High
- kong inc. gateway enterprise, ai gateway +1 moreIncorrect authorization in the Admin API RBAC of Kong Gateway Enterprise allows a delegated...CVE-2026-1059868.7 High