Log in Start free

Vulnerability · Published Sep 16, 2026 · Assigned by Kong

CVE-2026-14917Kong API Gateway Enterprise: SAML Authentication bypass

High 7.7

In plain English

A high-severity authentication bypass in Kong Enterprise Gateway from Kong. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities).

Severity (CVSS 4.0)7.7High
Exploit odds (30 days)0.8%top 42.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validate_assertion_signature option is explicitly set to false. This option is enabled by default. When disabled, the plugin may extract the SAML identity from an unsigned assertion and authenticate the user without verifying a valid cryptographic signature. As a result, an unauthenticated remote attacker may be able to submit a crafted SAML response and impersonate arbitrary users, including administrators

Affected products (as reported)

VendorProductVersions
Kong Kong Enterprise Gateway 3.15.0.0 – before 3.15.0.33.14.0.0 – before 3.14.0.123.13.0.0 – before 3.13.0.93.12.0.0 – before 3.12.0.103.10.0.0 – before 3.10.0.173.4.0.0 – before 3.4.3.29

Weakness: CWE-288 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N

References