{"id":"CVE-2026-92442","aliases":[],"cve":{"records":[{"id":"CVE-2026-92442","source":"Kong","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-16T10:24:55.906Z","published":"2026-11-10T21:26:47.098Z","modified":"2026-11-13T14:34:09.203Z"}],"publishers":[{"name":"Kong","role":"CNA","organizationId":"02762ae7-200e-4b20-9b2b-a77d5b8fc4cb","modified":"2026-11-10T21:26:47.098Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-13T14:34:09.203Z"}],"references":[{"url":"https://developer.konghq.com/gateway/changelog/","tags":["release-notes"],"source":"Kong"},{"url":"https://developer.konghq.com/ai-gateway/changelog/","tags":["release-notes"],"source":"Kong"}],"weaknesses":[{"id":"CWE-524","description":"CWE-524 Use of Cache Containing Sensitive Information","source":"Kong"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-13T14:33:46.740282Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise omits the caller's identity from the cache key, allowing a response cached for one caller…","titleSource":"Kong","descriptionSource":"Kong","description":"The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise omits the caller's identity from the cache key, allowing a response cached for one caller to be served to another.","score":8.3,"severity":"high","published":"2026-11-10T21:26:47.098Z","modified":"2026-11-13T14:34:09.203Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Kong Inc.","name":"Kong Gateway Enterprise","platforms":[],"versions":[{"version":"3.10.0.0","status":"affected","lessThan":"3.10.0.20","versionType":"custom"},{"version":"3.13.0.0","status":"affected","lessThan":"3.13.0.12","versionType":"custom"},{"version":"3.14.0.0","status":"affected","lessThan":"3.14.0.17","versionType":"custom"},{"version":"3.15.0.0","status":"affected","lessThan":"3.15.0.7","versionType":"custom"},{"version":"3.16.0.0","status":"affected","lessThan":"3.16.0.2","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"Kong","url":"https://www.cve.org/CVERecord?id=CVE-2026-92442"},{"vendor":"Kong Inc.","name":"Kong AI Gateway","platforms":[],"versions":[{"version":"2.2.0","status":"affected","lessThan":"2.2.1","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"Kong","url":"https://www.cve.org/CVERecord?id=CVE-2026-92442"}],"remediation":[],"references":["https://developer.konghq.com/gateway/changelog/","https://developer.konghq.com/ai-gateway/changelog/"],"sources":[{"name":"CVE","id":"CVE-2026-92442","modified":"2026-11-13T14:34:09.203Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-92442"}],"assessments":[{"source":"Kong","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N","score":8.3}],"sourceAffected":[],"observedAt":"2026-11-13T20:40:54.478Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T03:10:34.932Z"},"coverage":[{"source":"NVD","status":"refresh-failed","attemptedAt":"2026-11-14T07:05:35.261Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-14T06:55:36.848Z","attemptedAt":"2026-11-14T06:55:36.848Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-14T06:50:37.743Z","attemptedAt":"2026-11-14T06:50:37.743Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-14T06:50:36.499Z","attemptedAt":"2026-11-14T06:50:36.499Z"}],"evidence":[{"source":"FIRST EPSS","id":"CVE-2026-92442","url":"https://www.first.org/epss/","probability":0.00445,"percentile":0.39184,"date":"2026-11-13","checkedAt":"2026-11-14T06:50:36.499Z"},{"source":"ENISA EUVD","id":"EUVD-2026-122965","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-122965","modified":"Nov 13, 2026, 2:34:09 PM","score":8.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N","checkedAt":"2026-11-14T06:50:37.743Z"},{"source":"GitHub Advisory Database","id":"GHSA-qwjr-cqjj-jhfj","url":"https://github.com/advisories/GHSA-qwjr-cqjj-jhfj","modified":"2026-11-11T00:32:42Z","checkedAt":"2026-11-14T06:55:36.848Z"}],"aiSummary":{"text":"The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise and Kong AI Gateway omits the caller's identity from the cache key, potentially allowing a response cached for one caller to be served to another. Affected versions include Kong Gateway Enterprise 3.10.0.0 to 3.10.0.20, 3.13.0.0 to 3.13.0.12, 3.14.0.0 to 3.14.0.17, 3.15.0.0 to 3.15.0.7, and 3.16.0.0 to 3.16.0.2, as well as Kong AI Gateway 2.2.0. The weakness is related to the use of cache containing sensitive information.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-12T03:56:05.319Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-92442"}]}}