{"id":"CVE-2026-92544","aliases":[],"cve":{"records":[{"id":"CVE-2026-92544","source":"Kong","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-16T13:01:31.356Z","published":"2026-11-10T21:11:48.074Z","modified":"2026-11-13T16:40:54.817Z"}],"publishers":[{"name":"Kong","role":"CNA","organizationId":"02762ae7-200e-4b20-9b2b-a77d5b8fc4cb","modified":"2026-11-10T21:11:48.074Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-13T16:40:54.817Z"}],"references":[{"url":"https://developer.konghq.com/gateway/changelog/","tags":["release-notes"],"source":"Kong"},{"url":"https://developer.konghq.com/ai-gateway/changelog/","tags":["release-notes"],"source":"Kong"}],"weaknesses":[{"id":"CWE-89","description":"CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","source":"Kong"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-13T16:40:44.837600Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"SQL injection in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway may allow a client to execute arbitrary SQL against the Kong database…","titleSource":"Kong","descriptionSource":"Kong","description":"SQL injection in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway may allow a client to execute arbitrary SQL against the Kong database via a crafted model name.","score":8.7,"severity":"high","published":"2026-11-10T21:11:48.074Z","modified":"2026-11-13T16:40:54.817Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Kong Inc.","name":"Kong Gateway Enterprise","platforms":[],"versions":[{"version":"3.10.0.0","status":"affected","lessThan":"3.10.0.20","versionType":"custom"},{"version":"3.13.0.0","status":"affected","lessThan":"3.13.0.12","versionType":"custom"},{"version":"3.14.0.0","status":"affected","lessThan":"3.14.0.17","versionType":"custom"},{"version":"3.15.0.0","status":"affected","lessThan":"3.15.0.7","versionType":"custom"},{"version":"3.16.0.0","status":"affected","lessThan":"3.16.0.2","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"Kong","url":"https://www.cve.org/CVERecord?id=CVE-2026-92544"},{"vendor":"Kong Inc.","name":"Kong AI Gateway","platforms":[],"versions":[{"version":"2.2.0","status":"affected","lessThan":"2.2.1","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"Kong","url":"https://www.cve.org/CVERecord?id=CVE-2026-92544"}],"remediation":[],"references":["https://developer.konghq.com/gateway/changelog/","https://developer.konghq.com/ai-gateway/changelog/"],"sources":[{"name":"CVE","id":"CVE-2026-92544","modified":"2026-11-13T16:40:54.817Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-92544"}],"assessments":[{"source":"Kong","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N","score":8.7}],"sourceAffected":[],"observedAt":"2026-11-14T00:32:36.066Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T00:00:32.242Z"},"coverage":[{"source":"NVD","status":"refresh-failed","attemptedAt":"2026-11-14T02:10:32.253Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-14T01:55:37.875Z","attemptedAt":"2026-11-14T01:55:37.875Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-14T01:55:35.846Z","attemptedAt":"2026-11-14T01:55:35.846Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-14T01:55:34.913Z","attemptedAt":"2026-11-14T01:55:34.913Z"}],"evidence":[{"source":"FIRST EPSS","id":"CVE-2026-92544","url":"https://www.first.org/epss/","probability":0.00317,"percentile":0.24985,"date":"2026-11-13","checkedAt":"2026-11-14T01:55:34.913Z"},{"source":"ENISA EUVD","id":"EUVD-2026-122938","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-122938","modified":"Nov 13, 2026, 4:40:54 PM","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N","checkedAt":"2026-11-14T01:55:35.846Z"},{"source":"GitHub Advisory Database","id":"GHSA-jvch-w6fx-vccj","url":"https://github.com/advisories/GHSA-jvch-w6fx-vccj","modified":"2026-11-10T21:34:57Z","checkedAt":"2026-11-14T01:55:37.875Z"}],"aiSummary":{"text":"Kong Gateway Enterprise and Kong AI Gateway have a SQL injection weakness in LLM usage counters, potentially allowing clients to execute arbitrary SQL against the Kong database via crafted model names, affecting versions before 3.10.0.20, 3.13.0.12, 3.14.0.17, 3.15.0.7, 3.16.0.2, and 2.2.1.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-12T04:01:17.605Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-92544"}]}}