{"id":"CVE-2026-92441","published":"2026-11-10T22:21:14.867","lastModified":"2026-11-10T22:21:14.867","description":"Kong Gateway Enterprise and Kong AI Gateway include decoded CR/LF characters from the request path in the X-Forwarded-Prefix header on regex Routes, allowing HTTP header injection and request smuggling to the upstream.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-93"],"vendors":[],"products":[],"references":[{"url":"https://developer.konghq.com/ai-gateway/changelog/","tags":[]},{"url":"https://developer.konghq.com/gateway/changelog/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}