{"id":"CVE-2026-92439","kind":"vulnerability","aliases":["CVE-2026-92439"],"related":[],"title":"Kong Gateway Enterprise: SAML login accepts assertions meant for other providers","description":"The SAML plugin in Kong Gateway Enterprise does not enforce AudienceRestriction, allowing a valid assertion issued for another Service Provider to be replayed to authenticate to Kong.","summary":"The SAML plugin in Kong Gateway Enterprise does not check the AudienceRestriction field of SAML assertions. An attacker holding a valid assertion issued for a different Service Provider can replay it to log in to Kong.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"kong-gateway-enterprise","fixed":["3.16.0.2"],"affected":">= 3.16.0.0, < 3.16.0.2","ecosystem":"vendor"},{"name":"kong-gateway-enterprise","fixed":["3.15.0.7"],"affected":">= 3.15.0.0, < 3.15.0.7","ecosystem":"vendor"},{"name":"kong-gateway-enterprise","fixed":["3.14.0.17"],"affected":">= 3.14.0.0, < 3.14.0.17","ecosystem":"vendor"},{"name":"kong-gateway-enterprise","fixed":["3.13.0.12"],"affected":">= 3.13.0.0, < 3.13.0.12","ecosystem":"vendor"},{"name":"kong-gateway-enterprise","fixed":["3.10.0.20"],"affected":">= 3.10.0.0, < 3.10.0.20","ecosystem":"vendor"}],"ecosystems":[],"tags":["kong","kong-gateway-enterprise","saml","sso","vendor"],"not_affected_if":["open-source-gateway","saml-plugin-disabled"],"how_to_check":"- Run 'kong version' (or check your container image tag) and compare with the fixed releases: 3.16.0.2, 3.15.0.7, 3.14.0.17, 3.13.0.12, 3.10.0.20.\n- Check whether the saml plugin is enabled on any service, route or globally (GET /plugins on the Admin API, filter name=saml).\n- Also check if you run 3.11 or 3.12: Kong's changelog lists no fixed release for those lines, so confirm with Kong support.\n- Also check Kong AI Gateway: the CVE record (via OffSeq) lists 2.2.0 fixed in 2.2.1, which I did not confirm on Kong's page.\n- After upgrading, make sure the saml plugin's Audience value exactly matches issuer, or logins may fail.","fix":"Upgrade Kong Gateway Enterprise to the fixed release of your line: 3.16.0.2, 3.15.0.7, 3.14.0.17, 3.13.0.12 or 3.10.0.20. The fix enforces the assertion's audience restriction; Kong warns that stricter validation can break existing logins if the SAML plugin's Audience value is not an exact match for issuer, so test SSO after upgrading.","status":"open","published_at":"2026-11-10T22:21:14+00:00","first_seen_at":"2026-11-10T22:27:31+00:00","triaged_at":"2026-11-10T22:29:08+00:00","updated_at":"2026-11-10T22:38:19+00:00","category":"vendor","confidence":0.8,"triage":{"at":"2026-11-10T22:29:08Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Kong Gateway Enterprise: SAML login accepts assertions meant for other providers","impact":"high","summary":"The SAML plugin in Kong Gateway Enterprise does not check the AudienceRestriction field of SAML assertions. An attacker holding a valid assertion issued for a different Service Provider can replay it to log in to Kong.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["kong","kong-gateway-enterprise","saml","sso"],"confidence":0.6,"fix_status":"unknown","needs_auth":"unknown","worst_case":"attacker logs in to Kong using another provider's valid assertion","analyst_note":"Find the affected Kong Gateway Enterprise version ranges and fixed versions in the NVD entry or Kong's security advisory.","how_to_check":"- Check whether the SAML plugin is enabled on any Kong Gateway Enterprise service or route.\n- Confirm the Kong Gateway Enterprise version in use against the fixed versions in the vendor data.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["saml-plugin-disabled","open-source-gateway"],"who_is_affected":"Teams running Kong Gateway Enterprise with the SAML plugin enabled for single sign-on are exposed, because the gateway accepts assertions without checking which provider they were issued for. Deployments without the SAML plugin, or without Enterprise SAML login, are not affected. The sources do not name the affected version ranges.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"yes","severity_if_unknown":"high"},"cost_usd":0.000738,"input_tokens":4528,"output_tokens":570,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find the affected Kong Gateway Enterprise version ranges and fixed versions in the NVD entry or Kong's security advisory.","search":"'-2026':13A,16A '-92439':14A,17A 'accept':6A 'allow':93C 'anoth':99C 'assert':7A,61B,67B,96C 'attack':63B 'audiencerestrict':57B,92C 'authent':106C 'check':55B 'cve':12A,15A 'differ':71B 'enforc':91C 'enterpris':3A,42B,52B,88C 'enterprise':21A,25A,29A,33A,37A 'field':58B 'gateway':2A,20A,24A,28A,32A,36A,41B,51B,87C 'hold':64B 'issu':68B,97C 'kong':1A,19A,23A,27A,31A,35A,38B,40B,50B,81B,86C,108C 'kong-gateway-enterpris':39B 'kong-gateway-enterprise':18A,22A,26A,30A,34A 'log':78B 'login':5A 'meant':8A 'plugin':48B,84C 'provid':11A,73B,101C 'replay':75B,104C 'saml':4A,43B,47B,60B,83C 'servic':72B,100C 'sso':44B 'valid':66B,95C 'vendor':45B","nicknames":[],"mitigations":[],"who_affected":"Teams running Kong Gateway Enterprise with the SAML plugin enabled for single sign-on are exposed: the plugin does not check that a SAML assertion was issued for this Kong, so a valid assertion issued for another service provider can be replayed to log in. Deployments without the SAML plugin, and open-source Kong, are not affected. Affected ranges per the CVE record (via OffSeq): >=3.10.0.0 <3.10.0.20, >=3.13.0.0 <3.13.0.12, >=3.14.0.0 <3.14.0.17, >=3.15.0.0 <3.15.0.7, >=3.16.0.0 <3.16.0.2.","tier":"B","verified":{"fix":{"at":"2026-11-10T22:38:19Z","by":"analyst","doc":"https://developer.konghq.com/plugins/saml/changelog/","run_id":3011}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["konggatewayenterprise"],"ptokens":["enterprise","gateway","kong"],"labels":["high","kong","konggatewayenterprise","saml","sso","vendor"],"campaign_type":null,"search_a":"'-2026':13A,16A '-92439':14A,17A 'accept':6A 'assert':7A 'cve':12A,15A 'enterpris':3A 'enterprise':21A,25A,29A,33A,37A 'gateway':2A,20A,24A,28A,32A,36A 'kong':1A,19A,23A,27A,31A,35A 'kong-gateway-enterprise':18A,22A,26A,30A,34A 'login':5A 'meant':8A 'provid':11A 'saml':4A","search_b":"'assert':61B,67B 'attack':63B 'audiencerestrict':57B 'check':55B 'differ':71B 'enterpris':42B,52B 'field':58B 'gateway':41B,51B 'hold':64B 'issu':68B 'kong':38B,40B,50B,81B 'kong-gateway-enterpris':39B 'log':78B 'plugin':48B 'provid':73B 'replay':75B 'saml':43B,47B,60B 'servic':72B 'sso':44B 'valid':66B 'vendor':45B","search_c":"'allow':93C 'anoth':99C 'assert':96C 'audiencerestrict':92C 'authent':106C 'enforc':91C 'enterpris':88C 'gateway':87C 'issu':97C 'kong':86C,108C 'plugin':84C 'provid':101C 'replay':104C 'saml':83C 'servic':100C 'valid':95C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T22:21:14+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"02762ae7-200e-4b20-9b2b-a77d5b8fc4cb","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-92439","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92439","severity":null,"published_at":"2026-11-10T22:21:14+00:00","modified_at":"2026-11-10T22:21:14+00:00","first_seen_at":"2026-11-10T22:27:31+00:00","fetched_at":"2026-11-10T22:27:31+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-92439:3011","url":"https://developer.konghq.com/plugins/saml/changelog/","severity":null,"published_at":"2026-11-10T22:38:19+00:00","modified_at":"2026-11-10T22:38:19+00:00","first_seen_at":"2026-11-10T22:38:19+00:00","fetched_at":"2026-11-10T22:38:19+00:00","note":"Fixed versions confirmed on Kong's SAML plugin changelog (verified fix only). Affected ranges come from the OffSeq rewrite of the CVE record, not Kong's page, so not verified. Search for posts skipped (no exploitation or PoC found; X not queried). 3.11/3.12 status unknown.","cites":["https://developer.konghq.com/plugins/saml/changelog/","https://radar.offseq.com/threat/cve-2026-92439-cwe-287-improper-authentication-in-kong-inc-kong-gateway-enterprise-533d899b4d532565"]}],"documents":[{"id":119696,"url":"https://developer.konghq.com/plugins/saml/changelog/","title":"Kong SAML Plugin Changelog","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"fix","confidence":null,"note":null},{"id":119697,"url":"https://radar.offseq.com/threat/cve-2026-92439-cwe-287-improper-authentication-in-kong-inc-kong-gateway-enterprise-533d899b4d532565","title":"OffSeq: CVE-2026-92439 (CVE record rewrite)","kind":"other","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"describes","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}