Skip to content
OpenAdvisories
High · 7.8 CVE-2026-92439 EUVD-2026-123053GHSA-2gwr-9g7f-xj5c

The SAML plugin in Kong Gateway Enterprise does not enforce AudienceRestriction, allowing a valid assertion issued for another Service Prov…

Published Nov 10, 2026 · Updated Nov 13, 2026 · Assigned by Kong

Vendor: Kong Product: Kong AI Gateway Product: Kong Gateway Enterprise

Description

The SAML plugin in Kong Gateway Enterprise does not enforce AudienceRestriction, allowing a valid assertion issued for another Service Provider to be replayed to authenticate to Kong.

Affected products

VendorProductAffectedFixed
Kong Kong Gateway Enterprise 3.10.0.0 – < 3.10.0.20, 3.13.0.0 – < 3.13.0.12, 3.14.0.0 – < 3.14.0.17, 3.15.0.0 – < 3.15.0.7, 3.16.0.0 – < 3.16.0.2 3.10.0.20
Kong Kong AI Gateway 2.2.0 – < 2.2.1 2.2.1

Advisories 1

References