{"id":"CVE-2026-92442","published":"2026-11-10T22:21:14.987","lastModified":"2026-11-10T22:21:14.987","description":"The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise omits the caller's identity from the cache key, allowing a response cached for one caller to be served to another.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-524"],"vendors":[],"products":[],"references":[{"url":"https://developer.konghq.com/ai-gateway/changelog/","tags":[]},{"url":"https://developer.konghq.com/gateway/changelog/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}