---
id: "CVE-2026-92441"
page: "https://infrastack.ai/live/CVE-2026-92441"
kind: "vulnerability"
aliases: ["CVE-2026-92441"]
title: "Kong Gateway: decoded line breaks in request path enable header injection"
severity: "high"
cvss: 7.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "kong-gateway-enterprise", "fixed": ["3.16.0.2", "3.15.0.7"], "affected": "unknown; affected ranges not published in the sources read", "ecosystem": "vendor"}]
ecosystems: []
tags: ["api-gateway", "infrastructure", "kong", "kong-ai-gateway"]
not_affected_if: ["no-regex-routes"]
published_at: "2026-11-10T22:21:14+00:00"
first_seen_at: "2026-11-10T22:27:31+00:00"
updated_at: "2026-11-10T22:36:57+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-92441", "first_seen_at": "2026-11-10T22:27:31+00:00"}, {"source": "analyst", "url": "https://developer.konghq.com/gateway/changelog/", "first_seen_at": "2026-11-10T22:36:57+00:00", "cites": ["https://developer.konghq.com/gateway/changelog/"]}]
exploit_sources: []
---

# Kong Gateway: decoded line breaks in request path enable header injection

Link for people: https://infrastack.ai/live/CVE-2026-92441 (this .md is for agents)

Kong Gateway Enterprise and Kong AI Gateway copy decoded CR and LF characters from the request path into the X-Forwarded-Prefix header on regex Routes. An attacker can inject HTTP headers and smuggle requests to the upstream service.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:kong-gateway-enterprise affected unknown; affected ranges not published in the sources read fixed 3.16.0.2, 3.15.0.7

## How to check

- Run 'kong version' on each Kong Gateway Enterprise / Kong AI Gateway node; below 3.16.0.2 on 3.16.x or below 3.15.0.7 on 3.15.x is unpatched. Older branches: unknown, ask Kong.
- Check for Routes with regex paths (paths starting with ~), in kong.yaml or via the Admin API /routes. The NVD description limits the issue to regex Routes.
- Check whether the upstream reads X-Forwarded-Prefix. Kong's changelog names the header X-Forwarded-Path, so check both.

## Fix

Kong Gateway Enterprise: upgrade to 3.16.0.2 (3.16 branch) or 3.15.0.7 (3.15 branch), both released 2026-11-10. Fixes for older branches: unknown, not listed in the changelog.

## Timeline

- 2026-11-10T22:27:31+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-92441
- 2026-11-10T22:36:57+00:00 analyst https://developer.konghq.com/gateway/changelog/ — Kong changelog (vendor) lists the fix in 3.16.0.2 and 3.15.0.7 (2026-11-10). It says the header is X-Forwarded-Path, not X-Forwarded-Prefix as in the NVD description. Affected ranges, authentication requirement and a standalone advisory were not found; the Kong PSA page did not render. Fix verified only for those two branches.

## Documents

- [fix] Kong Gateway changelog (3.16.0.2) https://developer.konghq.com/gateway/changelog/

## From the sources

Kong Gateway Enterprise and Kong AI Gateway include decoded CR/LF characters from the request path in the X-Forwarded-Prefix header on regex Routes, allowing HTTP header injection and request smuggling to the upstream.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_