Kong vulnerabilities
We track 15 vulnerabilities in Kong products across 7 products. 15 are rated high or critical, and none are known to be exploited. The most recent was published on November 10, 2026.
Latest Kong vulnerabilities
- 8.2 High severity
Kong Gateway Enterprise: Not Failing Securely
The ai-azure-content-safety plugin in Kong Gateway Enterprise skips inspection of request bodies larger than the in-memory body buffer, allowing prompts to bypass input content-safety checks.
- 8.7 High severity
Kong Gateway Enterprise: Use of Cache Containing Sensitive Information
The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway omit the request hostname from the cache key which may allow a response cached for a hostname to be served for another.
- 8.2 High severity
Kong Gateway Enterprise: Use of Cache Containing Sensitive Information
The caching plugins in Kong Gateway Enterprise and Kong AI Gateway may serve a response cached for a request carrying an Authorization or Proxy-Authorization to different callers.
- 8.3 High severity
Kong Gateway Enterprise: Use of Cache Containing Sensitive Information
The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise omits the caller's identity from the cache key, allowing a response cached for one caller to be served to another.
- 7.8 High severity
Kong Gateway Enterprise: Improper Neutralization of CRLF Sequences
Kong Gateway Enterprise and Kong AI Gateway include decoded CR/LF characters from the request path in the X-Forwarded-Prefix header on regex Routes, allowing HTTP header injection and request smuggling to the upstream.
- 7.8 High severity
Kong Gateway Enterprise: Improper Authentication
The SAML plugin in Kong Gateway Enterprise does not enforce AudienceRestriction, allowing a valid assertion issued for another Service Provider to be replayed to authenticate to Kong.
- 8.2 High severity
Kong Gateway Enterprise: Use of Cache Containing Sensitive Information
The request-callout plugin in Kong Gateway Enterprise and Kong AI Gateway omits callout headers not sent by the client from its cache key, allowing a cached callout response for a caller to be served to another.
- 8.7 High severity
Kong Gateway Enterprise: Improper Neutralization of Special Elements used in an SQL Command
SQL injection in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway may allow a client to execute arbitrary SQL against the Kong database via a crafted model name.
- 8.7 High severity
Kong Gateway Enterprise: Incorrect Authorization
Incorrect authorization in the Admin API RBAC of Kong Gateway Enterprise allows a delegated administrator to elevate privileges via a percent-encoded role name or a self-assigned role.
- 7.5 High severity
Kong Enterprise Gateway: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection (SQLi) affects the Kong Gateway (Enterprise and Open Source) clustering communication logic when operating in Hybrid Mode. The issue can be triggered by sending specially crafted RPC requests to the Control Plane (CP), leading to potential unau
- 7.7 High severity
Kong Enteprise Gateway: Improper Handling of Unexpected Data Type
A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise. The affected code does not properly validate that the JWT signing algorithm is compatible
- 7.7 High severity
Kong Enterprise Gateway: Authentication Bypass Using an Alternate Path or Channel
A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validate_assertion_signature option is explicitly set to false. This option is enabled by default. When disabled, the plugin may extract the SAML identity from an unsigned asserti
- 7.0 High severity
Kong Mesh: Insufficient Verification of Data Authenticity
On a Kong Mesh global control plane, resources received over the zone-to-global KDS sync are attributed using the in-band, sender-controlled ControlPlane.Identifier rather than the authenticated zone identity derived from the connection. Authenticated zones ca
- 9.3 Critical severity
Kong Insomnia Desktop Application before 11.0.2 contains a template injection vulnerability…
Kong Insomnia Desktop Application before 11.0.2 contains a template injection vulnerability that allows attackers to execute arbitrary code. The vulnerability exists due to insufficient validation of user-supplied input when processing template strings, which
- 7.0 High severity
Insomnia: Untrusted Search Path
A vulnerability was found in Kong Insomnia up to 10.3.0 and classified as critical. This issue affects some unknown processing in the library profapi.dll. The manipulation leads to untrusted search path. An attack has to be approached locally. The complexity o