{"id":"CVE-2026-92545","kind":"vulnerability","aliases":["CVE-2026-92545"],"related":[],"title":"Kong Gateway: cache serves one hostname's response to another hostname","description":"The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway omit the request hostname from the cache key which may allow a response cached for a hostname to be served for another.","summary":"The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway leave the request hostname out of the cache key. A response cached for one hostname can therefore be served to requests meant for another hostname, exposing that content to the wrong client.","severity":"high","cvss":8.7,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Kong Gateway Enterprise","fixed":["3.16.0.2"],"affected":"below 3.16.0.2 (3.16 line; older branch ranges unconfirmed)","ecosystem":"vendor"}],"ecosystems":[],"tags":["api-gateway","enterprise","infrastructure","kong","proxy-cache","self-hosted"],"not_affected_if":["caching-plugins-disabled","proxy-cache-not-enabled","single-hostname"],"how_to_check":"Run Kong Gateway Enterprise or Kong AI Gateway with the proxy-cache or proxy-cache-advanced plugin enabled (also graphql-proxy-cache-advanced)? Check the plugin list in the Admin API (GET /plugins) and your version (kong version). Exposed if the plugin is enabled, the version is below the fix, and one cache serves more than one hostname (several Hosts on one route or service). A single hostname is not affected by this.","fix":"Kong Gateway Enterprise 3.16.0.2 (released 2026-11-10) adds the hostname to the proxy-cache, proxy-cache-advanced and graphql-proxy-cache-advanced cache key. Fixed versions for 3.14, 3.13 and other branches are not stated in the changelog I could read; check Kong's advisory at konghq.com/compliance/psa.","status":"open","published_at":"2026-11-10T22:21:15+00:00","first_seen_at":"2026-11-10T22:27:31+00:00","triaged_at":"2026-11-10T22:28:54+00:00","updated_at":"2026-11-10T22:37:17+00:00","category":"infrastructure","confidence":0.7,"triage":{"at":"2026-11-10T22:28:54Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Kong Gateway: cache serves one hostname's response to another hostname","impact":"medium","summary":"The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway leave the request hostname out of the cache key. A response cached for one hostname can therefore be served to requests meant for another hostname, exposing that content to the wrong client.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["kong","api-gateway","proxy-cache"],"confidence":0.6,"fix_status":"unknown","needs_auth":"unknown","worst_case":"cached responses from one hostname leak to another hostname's clients","analyst_note":"Find the affected and fixed Kong Gateway and Kong AI Gateway versions for CVE-2026-92545 in the NVD entry or Kong's advisory, and confirm the exposure conditions.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["caching-plugins-disabled","single-hostname"],"who_is_affected":"Teams running Kong Gateway Enterprise or Kong AI Gateway with the proxy-cache or proxy-cache-advanced plugin enabled, where one gateway serves several hostnames. Gateways without these plugins, or with caching off, are not exposed by this description. The sources do not list affected versions.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"yes","severity_if_unknown":"high"},"cost_usd":0.000728,"input_tokens":4539,"output_tokens":548,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find the affected and fixed Kong Gateway and Kong AI Gateway versions for CVE-2026-92545 in the NVD entry or Kong's advisory, and confirm the exposure conditions.","search":"'-2026':13A,16A '-92545':14A,17A 'advanc':41B,91C 'ai':49B,99C 'allow':111C 'anoth':10A,74B,122C 'api':22B 'api-gateway':21B 'cach':3A,29B,36B,40B,58B,62B,86C,90C,107C,114C 'client':82B 'content':78B 'cve':12A,15A 'enterpris':24B,46B,96C 'enterprise':20A 'expos':76B 'gateway':2A,19A,23B,45B,50B,95C,100C 'host':32B 'hostnam':6A,11A,54B,65B,75B,104C,117C 'infrastructur':25B 'key':59B,108C 'kong':1A,18A,26B,44B,48B,94C,98C 'leav':51B 'may':110C 'meant':72B 'omit':101C 'one':5A,64B 'plugin':42B,92C 'proxi':28B,35B,39B,85C,89C 'proxy-cach':27B,34B,84C 'proxy-cache-advanc':38B,88C 'request':53B,71B,103C 'respons':8A,61B,113C 'self':31B 'self-host':30B 'serv':4A,69B,120C 'therefor':67B 'wrong':81B","nicknames":[],"mitigations":[],"who_affected":"Teams running Kong Gateway Enterprise or Kong AI Gateway with the proxy-cache or proxy-cache-advanced plugin enabled, where one gateway serves several hostnames. Gateways without these plugins, or with caching off, are not exposed by this description. The sources do not list affected versions.","tier":"B","verified":{"fix":{"at":"2026-11-10T22:37:17Z","by":"analyst","doc":"https://developer.konghq.com/gateway/changelog/","run_id":3008}},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":["gatewayenterprise","konggatewayenterprise"],"ptokens":["enterprise","gateway","kong"],"labels":["apigateway","enterprise","high","infrastructure","kong","proxycache","selfhosted"],"campaign_type":null,"search_a":"'-2026':13A,16A '-92545':14A,17A 'anoth':10A 'cach':3A 'cve':12A,15A 'enterprise':20A 'gateway':2A,19A 'hostnam':6A,11A 'kong':1A,18A 'one':5A 'respons':8A 'serv':4A","search_b":"'advanc':41B 'ai':49B 'anoth':74B 'api':22B 'api-gateway':21B 'cach':29B,36B,40B,58B,62B 'client':82B 'content':78B 'enterpris':24B,46B 'expos':76B 'gateway':23B,45B,50B 'host':32B 'hostnam':54B,65B,75B 'infrastructur':25B 'key':59B 'kong':26B,44B,48B 'leav':51B 'meant':72B 'one':64B 'plugin':42B 'proxi':28B,35B,39B 'proxy-cach':27B,34B 'proxy-cache-advanc':38B 'request':53B,71B 'respons':61B 'self':31B 'self-host':30B 'serv':69B 'therefor':67B 'wrong':81B","search_c":"'advanc':91C 'ai':99C 'allow':111C 'anoth':122C 'cach':86C,90C,107C,114C 'enterpris':96C 'gateway':95C,100C 'hostnam':104C,117C 'key':108C 'kong':94C,98C 'may':110C 'omit':101C 'plugin':92C 'proxi':85C,89C 'proxy-cach':84C 'proxy-cache-advanc':88C 'request':103C 'respons':113C 'serv':120C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T22:21:15+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"02762ae7-200e-4b20-9b2b-a77d5b8fc4cb","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-92545","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92545","severity":null,"published_at":"2026-11-10T22:21:15+00:00","modified_at":"2026-11-10T22:21:15+00:00","first_seen_at":"2026-11-10T22:27:31+00:00","fetched_at":"2026-11-10T22:27:31+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-92545:3008","url":"https://developer.konghq.com/gateway/changelog/","severity":null,"published_at":"2026-11-10T22:37:17+00:00","modified_at":"2026-11-10T22:37:17+00:00","first_seen_at":"2026-11-10T22:37:17+00:00","fetched_at":"2026-11-10T22:37:17+00:00","note":"Kong changelog 3.16.0.2 (2026-11-10) lists CVE-2026-92545 fixed in proxy-cache, proxy-cache-advanced, graphql-proxy-cache-advanced via hostname in cache key. CNA CVSS 8.7. NVD page returned nothing and Kong's PSA article was not readable; backports to 3.14/3.13 and AI Gateway versions unconfirmed. No exploitation or PoC seen; did not search social.","cites":["https://developer.konghq.com/gateway/changelog/","https://vuln.mlab.sh/cna/Kong"]}],"documents":[{"id":119284,"url":"https://developer.konghq.com/gateway/changelog/","title":"Kong Gateway changelog (3.16.0.2)","kind":"release","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"fix","confidence":null,"note":null},{"id":119690,"url":"https://vuln.mlab.sh/cna/Kong","title":"Kong CNA CVE list (CVE-2026-92545, CVSS 8.7)","kind":"other","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}