Kong Inc. vulnerabilities
25 CVEs and advisories name Kong Inc. as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-92558The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway do not escape separator characters when…
- CVE-2026-123041The request-callout plugin in Kong Gateway Enterprise and Kong AI Gateway omits callout headers not sent by the client from its cache key…
- CVE-2026-92441Kong Gateway Enterprise and Kong AI Gateway include decoded CR/LF characters from the request path in the X-Forwarded-Prefix header on…
- CVE-2026-92439The SAML plugin in Kong Gateway Enterprise does not enforce AudienceRestriction, allowing a valid assertion issued for another Service…
- CVE-2026-96437The ai-azure-content-safety plugin in Kong Gateway Enterprise skips inspection of request bodies larger than the in-memory body buffer…
- CVE-2026-92443The caching plugins in Kong Gateway Enterprise and Kong AI Gateway may serve a response cached for a request carrying an Authorization or…
- CVE-2026-92442The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise omits the caller's identity from the cache key, allowing a response…
- CVE-2026-92545The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway omit the request hostname from the cache…
- CVE-2026-92544SQL injection in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway may allow a client to execute arbitrary SQL against…
- CVE-2026-105986Incorrect authorization in the Admin API RBAC of Kong Gateway Enterprise allows a delegated administrator to elevate privileges via a…
- CVE-2026-1907SQL Injection in Clustering Communication (Hybrid Mode)
- CVE-2026-14916Kong API Gateway Enterprise: JWT Algorithm-Confusion
- CVE-2026-14917Kong API Gateway Enterprise: SAML Authentication bypass
- CVE-2026-18674Kong Mesh multi-zone: the global control plane attributes KDS-synced resources by an unvalidated in-band zone identifier
- CVE-2026-18679Kong Mesh: kuma-dp connects to the control plane without verifying the TLS certificate when no CA is configured
- CVE-2026-18678Kong Mesh: kumactl connects to the control plane without verifying the TLS certificate when no CA is configured
- CVE-2026-18677Kong Mesh: a dataplane token without a workload binding can claim any workload's SPIFFE identity
- CVE-2026-18676Kong Mesh: default control plane config leaks the admin token cross-origin via a CORS wildcard and localhost admin
- CVE-2026-18675Kong Mesh: control plane denial of service via a malformed dataplane token with a non-string JWT kid
- CVE-2026-18673Kong Mesh: the kuma-dp readiness service exposes the Envoy admin API without authentication
- CVE-2026-17578Kong Event Gateway AES-GCM nonce reuse due to missing key rotation enforcement
- CVE-2026-6338HTTP request smuggling in Kong Enteprise Gateway
- CVE-2025-1087Arbitrary Code Execution in Kong Insomnia Desktop Application
- CVE-2025-1353Kong Insomnia profapi.dll untrusted search path
- CVE-2020-36661Kong lua-multipart multipart.lua is_header redos