PT-2026-144831
CVE-2026-92441
·
Published
2026-11-10
·
Updated
2026-11-11
Description by
CVSS 4.0
7.8
HighMetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions
Kong Gateway Enterprise (affected versions not specified)
Kong AI Gateway (affected versions not specified)
Description
Kong Gateway Enterprise and Kong AI Gateway include decoded Carriage Return (CR) and Line Feed (LF) characters from the request path in the
X-Forwarded-Prefix header when using regex Routes. This behavior allows for HTTP header injection and request smuggling to the upstream server. Request smuggling is a technique used to interfere with the way a website processes sequences of HTTP requests.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾