{"id":"CVE-2026-92439","published":"2026-11-10T22:21:14.740","lastModified":"2026-11-10T22:21:14.740","description":"The SAML plugin in Kong Gateway Enterprise does not enforce AudienceRestriction, allowing a valid assertion issued for another Service Provider to be replayed to authenticate to Kong.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-287"],"vendors":[],"products":[],"references":[{"url":"https://developer.konghq.com/ai-gateway/changelog/","tags":[]},{"url":"https://developer.konghq.com/gateway/changelog/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}