CVE-2026-92545

Name of the Vulnerable Software and Affected Versions Kong Gateway Enterprise (affected versions not specified) Kong AI Gateway (affected versions not specified)

Description The proxy-cache and proxy-cache-advanced plugins omit the request hostname from the cache key. This behavior can lead to a cache key collision, where a response cached for one hostname is incorrectly served to a request for a different hostname.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.