CVE-2026-92544

CVE-2026-92544CVE-2026-92544

Description

SQL injection in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway may allow a client to execute arbitrary SQL against the Kong database via a crafted model name.

Scoring

Last modified2026-11-10
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.