CVE-2026-92544

A SQL injection vulnerability exists in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway . An attacker can execute arbitrary SQL commands against the Kong database by providing a crafted model name . While the technical root cause is identified as improper neutralization of s...