Kong Gateway: Authenticated responses served from cache to other callers
Summary
Caching plugins in Kong Gateway Enterprise and Kong AI Gateway may return a cached response for a request that carries an Authorization or Proxy-Authorization header to a different caller. An attacker who can send requests to an affected gateway may therefore receive response data that belongs to another user, which affects confidentiality only. The issue requires a caching plugin to be enabled on a route that handles authenticated traffic.
Affected
- Kong Gateway Enterprise 3.10.0.0 to before 3.10.0.20
- Kong Gateway Enterprise 3.13.0.0 to before 3.13.0.12
- Kong Gateway Enterprise 3.14.0.0 to before 3.14.0.17
- Kong Gateway Enterprise 3.15.0.0 to before 3.15.0.7
- Kong Gateway Enterprise 3.16.0.0 to before 3.16.0.2
- Kong AI Gateway 2.2.0 to before 2.2.1
Fixed in
- Kong Gateway Enterprise 3.10.0.20
- Kong Gateway Enterprise 3.13.0.12
- Kong Gateway Enterprise 3.14.0.17
- Kong Gateway Enterprise 3.15.0.7
- Kong Gateway Enterprise 3.16.0.2 (fix confirmed in the vendor changelog)
- Kong AI Gateway 2.2.1 (per the CVE record; not shown in the vendor changelog excerpt reviewed)
Workaround
Unknown. No vendor workaround was found in the sources reviewed.
Exploitation
- No evidence found that the vulnerability is exploited in the wild.
- Not listed in KEV according to one aggregator; the CISA catalogue was not checked directly.
- No public proof of concept found.
Our recommendation
- Check whether Kong Gateway Enterprise or Kong AI Gateway is in use and which version runs.
- Check whether proxy-cache, proxy-cache-advanced, graphql-proxy-cache-advanced or ai-semantic-cache is enabled on routes that carry authenticated traffic.
- Upgrade to the fixed version for your branch.
- If you cannot patch soon, disable caching on authenticated routes after checking the impact on your services.
- Re-check the NVD entry and the Kong advisory once the analysis is complete.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- Kong Gateway changelog developer.konghq.com
- Kong AI Gateway changelog developer.konghq.com
- CVE-2026-92443 at Strix www.strix.ai
- CVE-2026-92443 at Threatint cve.threatint.com
- CVE-2026-92443 at OffSeq Radar radar.offseq.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 11 Nov 2026, 01:25.
Original description (NVD)
The caching plugins in Kong Gateway Enterprise and Kong AI Gateway may serve a response cached for a request carrying an Authorization or Proxy-Authorization to different callers.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.