CVE-2026-92439

The SAML plugin accepted assertions intended for another service

Kong · Kong AI Gateway SAML authentication

First documented disclosure · Review checkpoint

Summary

Authentication did not verify the intended audience of a valid assertion. The caller could authenticate to the gateway outside the intended audience.

Severity and exploitation evidence

High · 7.8/10 · CVSS 4.0. Severity source.

Exploitation not established: The reviewed advisory does not report malicious exploitation.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

Authentication did not verify the intended audience of a valid assertion.

Conditions required

A caller held an assertion from a trusted identity provider for another service.

Potential impact

The caller could authenticate to the gateway outside the intended audience.

Affected versions and configurations

Kong AI Gateway 2.2.0. Enterprise branch ranges are listed separately in the CNA record.

Fix and mitigation status

Kong AI Gateway 2.2.1.

Practical next steps

Upgrade AI Gateway to 2.2.1 and review the affected gateway configuration.

Operating lesson

Require identity assertions to name the service receiving them.

Evidence and limits

The CVE record was published on 2026-11-10.

Sources