---
id: "CVE-2026-123041"
page: "https://infrastack.ai/live/CVE-2026-123041"
kind: "vulnerability"
aliases: ["CVE-2026-123041"]
title: "Kong Gateway: cached plugin responses leak between different callers"
severity: "high"
cvss: 8.2
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Kong Gateway Enterprise", "fixed": ["3.16.0.2"], "affected": "unknown; see how-to-check", "ecosystem": "vendor"}]
ecosystems: []
tags: ["api-gateway", "caching", "infrastructure", "kong", "request-callout", "self-hosted"]
not_affected_if: ["callout-caching-disabled", "plugin-not-enabled"]
published_at: "2026-11-10T22:18:28+00:00"
first_seen_at: "2026-11-10T22:27:28+00:00"
updated_at: "2026-11-10T22:38:14+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-123041", "first_seen_at": "2026-11-10T22:27:28+00:00"}, {"source": "analyst", "url": "https://developer.konghq.com/plugins/request-callout/changelog/", "first_seen_at": "2026-11-10T22:38:14+00:00", "cites": ["https://developer.konghq.com/plugins/request-callout/changelog/", "https://developer.konghq.com/gateway/changelog/"]}]
exploit_sources: []
---

# Kong Gateway: cached plugin responses leak between different callers

Link for people: https://infrastack.ai/live/CVE-2026-123041 (this .md is for agents)

The request-callout plugin in Kong Gateway Enterprise and Kong AI Gateway leaves callout headers the client did not send out of its cache key. A cached callout response meant for one caller can therefore be served to another caller.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Kong Gateway Enterprise affected unknown; see how-to-check fixed 3.16.0.2

## How to check

Check whether the request-callout plugin is enabled (GET /plugins on the Admin API, or your decK/kong.yaml) with callouts that have a cache configured (config.cache, strategy memory or redis) and callout headers that vary per caller. Run 'kong version' to see your Enterprise build; anything below 3.16.0.2 on the 3.16 line is not shown as fixed. Also check Kong AI Gateway if you use request-callout there.

## Fix

Kong Gateway Enterprise: upgrade to 3.16.0.2 (released 2026-11-10), which includes all callout request headers in the request-callout cache key. Fixed versions for older branches and for Kong AI Gateway are not listed on the changelog page I read.

## Timeline

- 2026-11-10T22:27:28+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-123041
- 2026-11-10T22:38:14+00:00 analyst https://developer.konghq.com/plugins/request-callout/changelog/ — Kong's Gateway changelog lists 3.16.0.2 fixing CVE-2026-123041 in request-callout (all callout request headers now in cache key). NVD gave no versions; affected range, older-branch fixes and AI Gateway fix version not found. No exploitation or PoC seen; no social search done (low-profile, no nickname).

## Documents

- [describes] Request Callout Plugin Changelog https://developer.konghq.com/plugins/request-callout/changelog/
- [fix] Kong Gateway changelog (3.16.0.2) https://developer.konghq.com/gateway/changelog/

## From the sources

The request-callout plugin in Kong Gateway Enterprise and Kong AI Gateway omits callout headers not sent by the client from its cache key, allowing a cached callout response for a caller to be served to another.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_