CVE-2026-92544

UNKNOWN 0.0

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

SQL injection in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway may allow a client to execute arbitrary SQL against the Kong database via a crafted model name.

CWE	CWE-89
Vendor	kong inc.
Product	kong gateway enterprise
Published	Nov 10, 2026

Stay Ahead of the Next One

Get instant alerts for kong inc. kong gateway enterprise

Be the first to know when new unknown vulnerabilities affecting kong inc. kong gateway enterprise are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Kong Inc. / Kong Gateway Enterprise

3.10.0.0 < 3.10.0.20 3.13.0.0 < 3.13.0.12 3.14.0.0 < 3.14.0.17 3.15.0.0 < 3.15.0.7 3.16.0.0 < 3.16.0.2

Kong Inc. / Kong AI Gateway

2.2.0 < 2.2.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

developer.konghq.com: https://developer.konghq.com/gateway/changelog/ developer.konghq.com: https://developer.konghq.com/ai-gateway/changelog/

Credits

Amine Abdelghani Laaredj (axmine_0)