KONG-GATEWAY-ENTERPRISE · CVE-2026-92443 · AI agents & MCP
FIX → 3.16.0.2 +3
The caching plugins in Kong Gateway Enterprise and Kong AI Gateway can return a cached response built for one request carrying an Authorization or Proxy-Authorization header to a different caller. An attacker can receive another user's cached response, which may contain that user's data.
first public Nov 10, 2026 · 2 sources
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Teams running Kong Gateway Enterprise or Kong AI Gateway with a caching plugin enabled on routes that carry Authorization or Proxy-Authorization headers are exposed. Deployments without caching plugins, or where authenticated responses are never cached, can likely skip it. The sources do not name the affected version ranges.
Not affected if caching-plugin-disabled, managed-hosting, no-authenticated-routes, no-cache-plugin
Who cares api-gateway, caching, kong, kong-ai-gateway, kong-gateway, self-hosted
Upgrade to 3.16.0.2 +3
3.16.0.2, , or (all released 2026-11-10). fixes ai-semantic-cache only; its proxy-cache changelog does not list this CVEThe caching plugins in Kong Gateway Enterprise and Kong AI Gateway may serve a response cached for a request carrying an Authorization or Proxy-Authorization to different callers.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
3.15.0.73.14.0.173.10.0.203.13.0.12