---
id: "CVE-2026-92439"
page: "https://infrastack.ai/live/CVE-2026-92439"
kind: "vulnerability"
aliases: ["CVE-2026-92439"]
title: "Kong Gateway Enterprise: SAML login accepts assertions meant for other providers"
severity: "high"
cvss: 7.8
epss: null
exploited: false
status: "open"
category: "vendor"
products: [{"name": "kong-gateway-enterprise", "fixed": ["3.16.0.2"], "affected": ">= 3.16.0.0, < 3.16.0.2", "ecosystem": "vendor"}, {"name": "kong-gateway-enterprise", "fixed": ["3.15.0.7"], "affected": ">= 3.15.0.0, < 3.15.0.7", "ecosystem": "vendor"}, {"name": "kong-gateway-enterprise", "fixed": ["3.14.0.17"], "affected": ">= 3.14.0.0, < 3.14.0.17", "ecosystem": "vendor"}, {"name": "kong-gateway-enterprise", "fixed": ["3.13.0.12"], "affected": ">= 3.13.0.0, < 3.13.0.12", "ecosystem": "vendor"}, {"name": "kong-gateway-enterprise", "fixed": ["3.10.0.20"], "affected": ">= 3.10.0.0, < 3.10.0.20", "ecosystem": "vendor"}]
ecosystems: []
tags: ["kong", "kong-gateway-enterprise", "saml", "sso", "vendor"]
not_affected_if: ["open-source-gateway", "saml-plugin-disabled"]
published_at: "2026-11-10T22:21:14+00:00"
first_seen_at: "2026-11-10T22:27:31+00:00"
updated_at: "2026-11-10T22:38:19+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-92439", "first_seen_at": "2026-11-10T22:27:31+00:00"}, {"source": "analyst", "url": "https://radar.offseq.com/threat/cve-2026-92439-cwe-287-improper-authentication-in-kong-inc-kong-gateway-enterprise-533d899b4d532565", "first_seen_at": "2026-11-10T22:38:19+00:00", "cites": ["https://radar.offseq.com/threat/cve-2026-92439-cwe-287-improper-authentication-in-kong-inc-kong-gateway-enterprise-533d899b4d532565", "https://developer.konghq.com/plugins/saml/changelog/"]}]
exploit_sources: []
---

# Kong Gateway Enterprise: SAML login accepts assertions meant for other providers

Link for people: https://infrastack.ai/live/CVE-2026-92439 (this .md is for agents)

The SAML plugin in Kong Gateway Enterprise does not check the AudienceRestriction field of SAML assertions. An attacker holding a valid assertion issued for a different Service Provider can replay it to log in to Kong.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:kong-gateway-enterprise affected >= 3.16.0.0, < 3.16.0.2 fixed 3.16.0.2
- vendor:kong-gateway-enterprise affected >= 3.15.0.0, < 3.15.0.7 fixed 3.15.0.7
- vendor:kong-gateway-enterprise affected >= 3.14.0.0, < 3.14.0.17 fixed 3.14.0.17
- vendor:kong-gateway-enterprise affected >= 3.13.0.0, < 3.13.0.12 fixed 3.13.0.12
- vendor:kong-gateway-enterprise affected >= 3.10.0.0, < 3.10.0.20 fixed 3.10.0.20

## How to check

- Run 'kong version' (or check your container image tag) and compare with the fixed releases: 3.16.0.2, 3.15.0.7, 3.14.0.17, 3.13.0.12, 3.10.0.20.
- Check whether the saml plugin is enabled on any service, route or globally (GET /plugins on the Admin API, filter name=saml).
- Also check if you run 3.11 or 3.12: Kong's changelog lists no fixed release for those lines, so confirm with Kong support.
- Also check Kong AI Gateway: the CVE record (via OffSeq) lists 2.2.0 fixed in 2.2.1, which I did not confirm on Kong's page.
- After upgrading, make sure the saml plugin's Audience value exactly matches issuer, or logins may fail.

## Fix

Upgrade Kong Gateway Enterprise to the fixed release of your line: 3.16.0.2, 3.15.0.7, 3.14.0.17, 3.13.0.12 or 3.10.0.20. The fix enforces the assertion's audience restriction; Kong warns that stricter validation can break existing logins if the SAML plugin's Audience value is not an exact match for issuer, so test SSO after upgrading.

## Timeline

- 2026-11-10T22:27:31+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-92439
- 2026-11-10T22:38:19+00:00 analyst https://radar.offseq.com/threat/cve-2026-92439-cwe-287-improper-authentication-in-kong-inc-kong-gateway-enterprise-533d899b4d532565 — Fixed versions confirmed on Kong's SAML plugin changelog (verified fix only). Affected ranges come from the OffSeq rewrite of the CVE record, not Kong's page, so not verified. Search for posts skipped (no exploitation or PoC found; X not queried). 3.11/3.12 status unknown.

## Documents

- [describes] OffSeq: CVE-2026-92439 (CVE record rewrite) https://radar.offseq.com/threat/cve-2026-92439-cwe-287-improper-authentication-in-kong-inc-kong-gateway-enterprise-533d899b4d532565
- [fix] Kong SAML Plugin Changelog https://developer.konghq.com/plugins/saml/changelog/

## From the sources

The SAML plugin in Kong Gateway Enterprise does not enforce AudienceRestriction, allowing a valid assertion issued for another Service Provider to be replayed to authenticate to Kong.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_