{"id":"CVE-2026-92558","published":"2026-11-10T22:21:15.413","lastModified":"2026-11-10T22:21:15.413","description":"The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway do not escape separator characters when building the cache key, allowing a remote attacker to cause a response cached for one request to be served for a different request on the same Route.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-116"],"vendors":[],"products":[],"references":[{"url":"https://developer.konghq.com/ai-gateway/changelog/","tags":[]},{"url":"https://developer.konghq.com/gateway/changelog/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}