{"id":"CVE-2026-92442","kind":"vulnerability","aliases":["CVE-2026-92442"],"related":[],"title":"Kong Gateway: GraphQL proxy cache serves one caller's response to another","description":"The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise omits the caller's identity from the cache key, allowing a response cached for one caller to be served to another.","summary":"The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise leaves the caller's identity out of its cache key. An attacker can receive a cached response that was generated for a different user.","severity":"high","cvss":8.3,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Kong Gateway Enterprise","fixed":["3.16.0.2"],"affected":"< 3.16.0.2 (lower bound unknown; plugin graphql-proxy-cache-advanced)","ecosystem":"vendor"}],"ecosystems":[],"tags":["api-gateway","graphql","kong-gateway","self-hosted","vendor"],"not_affected_if":["open-source-gateway","plugin-disabled"],"how_to_check":"- Check whether the graphql-proxy-cache-advanced plugin is enabled on any route, service, consumer or globally (Admin API: GET /plugins, filter name=graphql-proxy-cache-advanced; or your decK/kong.yaml).\\n- Check your Kong Gateway Enterprise version (kong version). 3.16.0.2 contains the fix; the affected range below 3.16.0.2 is not stated in the sources I read.\\n- Also check older Enterprise branches: Kong's changelog lists no fix for them, so ask Kong support or check their advisory.","fix":"Kong Gateway Enterprise 3.16.0.2 (released 2026-11-10) adds the authenticated consumer to the graphql-proxy-cache-advanced cache key. Fixed versions on older branches are not stated in the changelog I read.","status":"open","published_at":"2026-11-10T22:21:14+00:00","first_seen_at":"2026-11-10T22:27:31+00:00","triaged_at":"2026-11-10T22:28:58+00:00","updated_at":"2026-11-10T22:36:57+00:00","category":"vendor","confidence":0.7,"triage":{"at":"2026-11-10T22:28:58Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Kong Gateway: GraphQL proxy cache serves one caller's response to another","impact":"medium","summary":"The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise leaves the caller's identity out of its cache key. An attacker can receive a cached response that was generated for a different user.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["kong-gateway","graphql","api-gateway","self-hosted"],"confidence":0.6,"fix_status":"unknown","needs_auth":"unknown","worst_case":"one user reads another user's cached GraphQL responses","analyst_note":"Confirm affected Kong Gateway Enterprise version ranges and fixed versions from the NVD entry or Kong's advisory.","how_to_check":"- Check whether Kong Gateway Enterprise is deployed and whether the graphql-proxy-cache-advanced plugin is enabled on any route or service.\n- Confirm the Kong Gateway Enterprise version in use against the affected ranges in the NVD entry.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["plugin-disabled","open-source-gateway"],"who_is_affected":"Teams running Kong Gateway Enterprise with the graphql-proxy-cache-advanced plugin enabled are exposed, since responses cached for one caller can be served to another. Deployments without that plugin, or without Enterprise, are not described as affected by the sources.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"yes","severity_if_unknown":"high"},"cost_usd":0.000731,"input_tokens":4523,"output_tokens":557,"severity_before":"high"},"analyst_status":"done","analyst_note":"Confirm affected Kong Gateway Enterprise version ranges and fixed versions from the NVD entry or Kong's advisory.","search":"'-2026':14A,17A '-92442':15A,18A 'advanc':38B,73C 'allow':88C 'anoth':12A,99C 'api':23B 'api-gateway':22B 'attack':55B 'cach':5A,37B,52B,59B,72C,86C,91C 'caller':8A,46B,81C,94C 'cve':13A,16A 'differ':66B 'enterpris':43B,78C 'enterprise':21A 'gateway':2A,20A,24B,28B,42B,77C 'generat':63B 'graphql':3A,25B,35B,70C 'graphql-proxy-cache-advanc':34B,69C 'host':31B 'ident':48B,83C 'key':53B,87C 'kong':1A,19A,27B,41B,76C 'kong-gateway':26B 'leav':44B 'omit':79C 'one':7A,93C 'plugin':39B,74C 'proxi':4A,36B,71C 'receiv':57B 'respons':10A,60B,90C 'self':30B 'self-host':29B 'serv':6A,97C 'user':67B 'vendor':32B","nicknames":[],"mitigations":[],"who_affected":"Teams running Kong Gateway Enterprise with the graphql-proxy-cache-advanced plugin enabled are exposed, since responses cached for one caller can be served to another. Deployments without that plugin, or without Enterprise, are not described as affected by the sources.","tier":"B","verified":{"fix":{"at":"2026-11-10T22:36:57Z","by":"analyst","doc":"https://developer.konghq.com/gateway/changelog/","run_id":3009}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["gatewayenterprise","konggatewayenterprise"],"ptokens":["enterprise","gateway","kong"],"labels":["apigateway","graphql","high","konggateway","selfhosted","vendor"],"campaign_type":null,"search_a":"'-2026':14A,17A '-92442':15A,18A 'anoth':12A 'cach':5A 'caller':8A 'cve':13A,16A 'enterprise':21A 'gateway':2A,20A 'graphql':3A 'kong':1A,19A 'one':7A 'proxi':4A 'respons':10A 'serv':6A","search_b":"'advanc':38B 'api':23B 'api-gateway':22B 'attack':55B 'cach':37B,52B,59B 'caller':46B 'differ':66B 'enterpris':43B 'gateway':24B,28B,42B 'generat':63B 'graphql':25B,35B 'graphql-proxy-cache-advanc':34B 'host':31B 'ident':48B 'key':53B 'kong':27B,41B 'kong-gateway':26B 'leav':44B 'plugin':39B 'proxi':36B 'receiv':57B 'respons':60B 'self':30B 'self-host':29B 'user':67B 'vendor':32B","search_c":"'advanc':73C 'allow':88C 'anoth':99C 'cach':72C,86C,91C 'caller':81C,94C 'enterpris':78C 'gateway':77C 'graphql':70C 'graphql-proxy-cache-advanc':69C 'ident':83C 'key':87C 'kong':76C 'omit':79C 'one':93C 'plugin':74C 'proxi':71C 'respons':90C 'serv':97C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T22:21:14+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"02762ae7-200e-4b20-9b2b-a77d5b8fc4cb","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-92442","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92442","severity":null,"published_at":"2026-11-10T22:21:14+00:00","modified_at":"2026-11-10T22:21:14+00:00","first_seen_at":"2026-11-10T22:27:31+00:00","fetched_at":"2026-11-10T22:27:31+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-92442:3009","url":"https://developer.konghq.com/gateway/changelog/","severity":null,"published_at":"2026-11-10T22:36:57+00:00","modified_at":"2026-11-10T22:36:57+00:00","first_seen_at":"2026-11-10T22:36:57+00:00","fetched_at":"2026-11-10T22:36:57+00:00","note":"Fix 3.16.0.2 read in Kong's changelog (vendor). Affected lower bound and older-branch fixes not found; NVD page returned empty. No exploitation or PoC found. No posts searched.","cites":["https://developer.konghq.com/gateway/changelog/","https://developer.konghq.com/plugins/graphql-proxy-cache-advanced/"]}],"documents":[{"id":119284,"url":"https://developer.konghq.com/gateway/changelog/","title":"Kong Gateway changelog (3.16.0.2)","kind":"release","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"fix","confidence":null,"note":null},{"id":119685,"url":"https://developer.konghq.com/plugins/graphql-proxy-cache-advanced/","title":"GraphQL Proxy Caching Advanced plugin","kind":"vendor","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"describes","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}