{"id":"CVE-2026-92443","kind":"vulnerability","aliases":["CVE-2026-92443"],"related":[],"title":"Kong AI Gateway: caching plugin may serve one caller's response to another","description":"The caching plugins in Kong Gateway Enterprise and Kong AI Gateway may serve a response cached for a request carrying an Authorization or Proxy-Authorization to different callers.","summary":"The caching plugins in Kong Gateway Enterprise and Kong AI Gateway can return a cached response built for one request carrying an Authorization or Proxy-Authorization header to a different caller. An attacker can receive another user's cached response, which may contain that user's data.","severity":"high","cvss":8.2,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"kong-gateway-enterprise","fixed":["3.16.0.2","3.15.0.7","3.14.0.17","3.10.0.20"],"affected":"unknown lower bound, before 3.16.0.2 / 3.15.0.7 / 3.14.0.17 / 3.10.0.20","ecosystem":"vendor"}],"ecosystems":[],"tags":["ai-tooling","api-gateway","caching","kong","kong-ai-gateway","kong-gateway","self-hosted"],"not_affected_if":["caching-plugin-disabled","managed-hosting","no-authenticated-routes","no-cache-plugin"],"how_to_check":"Run the Admin API request GET /plugins and look for proxy-cache, proxy-cache-advanced, graphql-proxy-cache-advanced or ai-semantic-cache on any route, service or globally. Compare your Kong Gateway Enterprise version (kong version) with the fixed versions. Affected only if a cache plugin is on a route that serves requests with Authorization or Proxy-Authorization headers.","fix":"Upgrade Kong Gateway Enterprise to 3.16.0.2, 3.15.0.7, 3.14.0.17 or 3.10.0.20 (all released 2026-11-10). 3.13.0.12 fixes ai-semantic-cache only; its proxy-cache changelog does not list this CVE. Affected plugins: proxy-cache, proxy-cache-advanced, graphql-proxy-cache-advanced, ai-semantic-cache.","status":"open","published_at":"2026-11-10T22:21:15+00:00","first_seen_at":"2026-11-10T22:27:31+00:00","triaged_at":"2026-11-10T22:29:05+00:00","updated_at":"2026-11-10T22:30:39+00:00","category":"ai-tooling","confidence":0.75,"triage":{"at":"2026-11-10T22:29:05Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Kong AI Gateway: caching plugin may serve one caller's response to another","impact":"medium","summary":"The caching plugins in Kong Gateway Enterprise and Kong AI Gateway can return a cached response built for one request carrying an Authorization or Proxy-Authorization header to a different caller. An attacker can receive another user's cached response, which may contain that user's data.","audience":"businesses","category":"ai-tooling","nicknames":[],"who_cares":["kong","kong-gateway","kong-ai-gateway","api-gateway"],"confidence":0.6,"fix_status":"unknown","needs_auth":"unknown","worst_case":"other callers receive cached responses meant for another user","analyst_note":"Find affected and fixed version ranges for Kong Gateway Enterprise and Kong AI Gateway in the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-92443 or Kong's advisory.","how_to_check":"- Check whether the Kong caching plugin (proxy-cache or ai-semantic-cache style plugins) is enabled on any route or service.\n- Confirm the Kong Gateway Enterprise or Kong AI Gateway version in use against the fixed versions below.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["caching-plugin-disabled","no-authenticated-routes"],"who_is_affected":"Teams running Kong Gateway Enterprise or Kong AI Gateway with a caching plugin enabled on routes that carry Authorization or Proxy-Authorization headers are exposed. Deployments without caching plugins, or where authenticated responses are never cached, can likely skip it. The sources do not name the affected version ranges.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"yes","severity_if_unknown":"high"},"cost_usd":0.000772,"input_tokens":4517,"output_tokens":640,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find affected and fixed version ranges for Kong Gateway Enterprise and Kong AI Gateway in the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-92443 or Kong's advisory.","search":"'-2026':15A,18A '-92443':16A,19A 'ai':2A,25B,34B,51B,99C 'ai-tool':24B 'anoth':13A,78B 'api':28B 'api-gateway':27B 'attack':75B 'author':64B,68B,111C,115C 'built':58B 'cach':4A,30B,43B,56B,81B,91C,105C 'caller':9A,73B,118C 'carri':62B,109C 'contain':85B 'cve':14A,17A 'data':89B 'differ':72B,117C 'enterpris':48B,96C 'enterprise':23A 'gateway':3A,22A,29B,35B,38B,47B,52B,95C,100C 'header':69B 'host':41B 'kong':1A,21A,31B,33B,37B,46B,50B,94C,98C 'kong-ai-gateway':32B 'kong-gateway':36B 'kong-gateway-enterprise':20A 'may':6A,84B,101C 'one':8A,60B 'plugin':5A,44B,92C 'proxi':67B,114C 'proxy-author':66B,113C 'receiv':77B 'request':61B,108C 'respons':11A,57B,82B,104C 'return':54B 'self':40B 'self-host':39B 'serv':7A,102C 'tool':26B 'user':79B,87B","nicknames":[],"mitigations":[],"who_affected":"Teams running Kong Gateway Enterprise or Kong AI Gateway with a caching plugin enabled on routes that carry Authorization or Proxy-Authorization headers are exposed. Deployments without caching plugins, or where authenticated responses are never cached, can likely skip it. The sources do not name the affected version ranges.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":["konggatewayenterprise"],"ptokens":["enterprise","gateway","kong"],"labels":["aitooling","apigateway","caching","high","kong","kongaigateway","konggateway","selfhosted"],"campaign_type":null,"search_a":"'-2026':15A,18A '-92443':16A,19A 'ai':2A 'anoth':13A 'cach':4A 'caller':9A 'cve':14A,17A 'enterprise':23A 'gateway':3A,22A 'kong':1A,21A 'kong-gateway-enterprise':20A 'may':6A 'one':8A 'plugin':5A 'respons':11A 'serv':7A","search_b":"'ai':25B,34B,51B 'ai-tool':24B 'anoth':78B 'api':28B 'api-gateway':27B 'attack':75B 'author':64B,68B 'built':58B 'cach':30B,43B,56B,81B 'caller':73B 'carri':62B 'contain':85B 'data':89B 'differ':72B 'enterpris':48B 'gateway':29B,35B,38B,47B,52B 'header':69B 'host':41B 'kong':31B,33B,37B,46B,50B 'kong-ai-gateway':32B 'kong-gateway':36B 'may':84B 'one':60B 'plugin':44B 'proxi':67B 'proxy-author':66B 'receiv':77B 'request':61B 'respons':57B,82B 'return':54B 'self':40B 'self-host':39B 'tool':26B 'user':79B,87B","search_c":"'ai':99C 'author':111C,115C 'cach':91C,105C 'caller':118C 'carri':109C 'differ':117C 'enterpris':96C 'gateway':95C,100C 'kong':94C,98C 'may':101C 'plugin':92C 'proxi':114C 'proxy-author':113C 'request':108C 'respons':104C 'serv':102C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T22:21:15+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"02762ae7-200e-4b20-9b2b-a77d5b8fc4cb","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-92443","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92443","severity":null,"published_at":"2026-11-10T22:21:15+00:00","modified_at":"2026-11-10T22:21:15+00:00","first_seen_at":"2026-11-10T22:27:31+00:00","fetched_at":"2026-11-10T22:27:31+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-92443:2988","url":"https://developer.konghq.com/gateway/changelog/","severity":null,"published_at":"2026-11-10T22:30:39+00:00","modified_at":"2026-11-10T22:30:39+00:00","first_seen_at":"2026-11-10T22:30:39+00:00","fetched_at":"2026-11-10T22:30:39+00:00","note":"Kong changelogs (gateway, proxy-cache, ai-semantic-cache) list the fix: authenticated responses no longer cached. Lower affected bound not published; AI Gateway 2.x fixed version not stated for this CVE.","cites":["https://developer.konghq.com/gateway/changelog/","https://developer.konghq.com/plugins/proxy-cache/changelog/","https://developer.konghq.com/plugins/ai-semantic-cache/changelog/"]}],"documents":[{"id":119284,"url":"https://developer.konghq.com/gateway/changelog/","title":"Kong Gateway changelog (3.16.0.2)","kind":"release","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"fix","confidence":null,"note":null},{"id":119656,"url":"https://developer.konghq.com/plugins/proxy-cache/changelog/","title":"Proxy Cache Plugin Changelog","kind":"release","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"fix","confidence":null,"note":null},{"id":119657,"url":"https://developer.konghq.com/plugins/ai-semantic-cache/changelog/","title":"AI Semantic Cache Plugin Changelog","kind":"release","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"fix","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}