{"id":"CVE-2026-105986","published":"2026-11-10T21:17:52.560","lastModified":"2026-11-10T21:17:52.560","description":"Incorrect authorization in the Admin API RBAC of Kong Gateway Enterprise allows a delegated administrator to elevate  privileges via a percent-encoded role name or a self-assigned role.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-863"],"vendors":[],"products":[],"references":[{"url":"https://developer.konghq.com/ai-gateway/changelog/","tags":[]},{"url":"https://developer.konghq.com/gateway/changelog/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}