Kong AI Gateway vulnerabilities
8 known vulnerabilities in Kong AI Gateway from Kong. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.7 High severity
Kong Gateway Enterprise: Use of Cache Containing Sensitive Information
The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway omit the request hostname from the cache key which may allow a response cached for a hostname to be served for another.
- 8.2 High severity
Kong Gateway Enterprise: Use of Cache Containing Sensitive Information
The caching plugins in Kong Gateway Enterprise and Kong AI Gateway may serve a response cached for a request carrying an Authorization or Proxy-Authorization to different callers.
- 8.3 High severity
Kong Gateway Enterprise: Use of Cache Containing Sensitive Information
The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise omits the caller's identity from the cache key, allowing a response cached for one caller to be served to another.
- 7.8 High severity
Kong Gateway Enterprise: Improper Neutralization of CRLF Sequences
Kong Gateway Enterprise and Kong AI Gateway include decoded CR/LF characters from the request path in the X-Forwarded-Prefix header on regex Routes, allowing HTTP header injection and request smuggling to the upstream.
- 7.8 High severity
Kong Gateway Enterprise: Improper Authentication
The SAML plugin in Kong Gateway Enterprise does not enforce AudienceRestriction, allowing a valid assertion issued for another Service Provider to be replayed to authenticate to Kong.
- 8.2 High severity
Kong Gateway Enterprise: Use of Cache Containing Sensitive Information
The request-callout plugin in Kong Gateway Enterprise and Kong AI Gateway omits callout headers not sent by the client from its cache key, allowing a cached callout response for a caller to be served to another.
- 8.7 High severity
Kong Gateway Enterprise: Improper Neutralization of Special Elements used in an SQL Command
SQL injection in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway may allow a client to execute arbitrary SQL against the Kong database via a crafted model name.
- 8.7 High severity
Kong Gateway Enterprise: Incorrect Authorization
Incorrect authorization in the Admin API RBAC of Kong Gateway Enterprise allows a delegated administrator to elevate privileges via a percent-encoded role name or a self-assigned role.