Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Kong Inc. | Kong Gateway Enterprise | unaffected |
|
||||||||||||||||||
| Kong Inc. | Kong AI Gateway | unaffected |
|
No data.
No data.
| Vendor | Product | Confidence | Versions | ||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Konghq | Kong Ai Gateway | 100% |
|
||||||||||||||||||||||||
| Konghq | Kong Gateway Enterprise | 100% |
|
Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Fri, 13 Nov 2026 12:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Cross-User Data Leakage via Misconstructed Cache Key in Kong Request-Callout Plugin |
Thu, 12 Nov 2026 20:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Konghq
Konghq kong Ai Gateway Konghq kong Gateway Enterprise |
|
| Vendors & Products |
Konghq
Konghq kong Ai Gateway Konghq kong Gateway Enterprise |
Thu, 12 Nov 2026 14:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Cross-user Data Leakage via Cached Request-callout Responses |
Wed, 11 Nov 2026 23:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Cross-user Data Leakage via Cached Request-callout Responses |
Tue, 10 Nov 2026 22:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The request-callout plugin in Kong Gateway Enterprise and Kong AI Gateway omits callout headers not sent by the client from its cache key, allowing a cached callout response for a caller to be served to another. | |
| Weaknesses | CWE-524 | |
| References |
| |
| Metrics |
cvssV4_0
|
MITRE
Status: PUBLISHED
Assigner: Kong
Published:
Updated: 2026-11-13T13:41:26.043Z
Reserved: 2026-11-05T08:13:50.698Z
Link: CVE-2026-123041
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-11-10T22:18:28.870
Modified: 2026-11-13T14:17:49.347
Link: CVE-2026-123041
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-11-13T11:45:20Z
-
CWE-524
Use of Cache Containing Sensitive Information