CVE-2026-105986

Delegated administrators could assign excess gateway privileges

Kong · Kong AI Gateway administrator role management

First documented disclosure · Review checkpoint

Summary

Role management did not enforce the intended delegation boundary. The account could gain privileges beyond its delegated scope.

Severity and exploitation evidence

High · 8.7/10 · CVSS 4.0. Severity source.

Exploitation not established: The reviewed advisory does not report malicious exploitation.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

Role management did not enforce the intended delegation boundary.

Conditions required

A delegated administrator could manage role assignments.

Potential impact

The account could gain privileges beyond its delegated scope.

Affected versions and configurations

Kong AI Gateway 2.2.0. Enterprise branch ranges are listed separately in the CNA record.

Fix and mitigation status

Kong AI Gateway 2.2.1.

Practical next steps

Upgrade AI Gateway to 2.2.1 and review the affected gateway configuration.

Operating lesson

Verify delegated administrators cannot grant their own accounts broader roles.

Evidence and limits

The CVE record was published on 2026-11-10.

Sources