CVE-2026-92558 · Vendor
NO FIX YET
The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway build cache keys without escaping separator characters. A remote attacker can make a response cached for one request get served for a different request on the same Route.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Teams running Kong Gateway Enterprise or Kong AI Gateway with the proxy-cache or proxy-cache-advanced plugin enabled on a Route are exposed, since cached responses can be returned to other requests on that Route. Deployments that do not use these plugins are not affected by this description. Whether a specific version is affected is unknown from the sources.
Not affected if proxy-cache-not-enabled
Who cares api-gateway, kong, kong-gateway, proxy-cache
proxy-cache or proxy-cache-advanced plugin is enabled on any Route or Service in Kong Gateway Enterprise or Kong AI Gateway.No fix yet, per the sources.
The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway do not escape separator characters when building the cache key, allowing a remote attacker to cause a response cached for one request to be served for a different request on the same Route.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.