What is GHSA-jvch-w6fx-vccj?

GHSA-jvch-w6fx-vccj is a security advisory published by GitHub Security Advisories with High severity. SQL injection in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway may allow...

Which CVE IDs does GHSA-jvch-w6fx-vccj cover?

GHSA-jvch-w6fx-vccj covers the following CVE IDs: CVE-2026-92544. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-jvch-w6fx-vccjHigh

SQL injection in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway may allow...

Vendor

GitHub Security Advisories

Published

November 10, 2026

Last Modified

November 10, 2026

🔗 CVE IDs covered (1)

CVE-2026-92544 →

📋 Description

SQL injection in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway may allow a client to execute arbitrary SQL against the Kong database via a crafted model name.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-92544
https://developer.konghq.com/ai-gateway/changelog
https://developer.konghq.com/gateway/changelog
https://github.com/advisories/GHSA-jvch-w6fx-vccj