{"id":"CVE-2026-92544","published":"2026-11-10T21:21:40.433","lastModified":"2026-11-10T21:21:40.433","description":"SQL injection in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway may allow a client to execute arbitrary SQL against the Kong database via a crafted model name.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-89"],"vendors":[],"products":[],"references":[{"url":"https://developer.konghq.com/ai-gateway/changelog/","tags":[]},{"url":"https://developer.konghq.com/gateway/changelog/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}