Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2026-14917

Kong API Gateway Enterprise: SAML Authentication bypass

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Kong

Description

A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validate_assertion_signature option is explicitly set to false. This option is enabled by default. When disabled, the plugin may extract the SAML identity from an unsigned assertion and authenticate the user without verifying a valid cryptographic signature. As a result, an unauthenticated remote attacker may be able to submit a crafted SAML response and impersonate arbitrary users, including administrators

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Kong Kong Enterprise Gateway

Default version status: unaffected

  • 3.15.0.0 to < 3.15.0.3affected
  • 3.14.0.0 to < 3.14.0.12affected
  • 3.13.0.0 to < 3.13.0.9affected
  • 3.12.0.0 to < 3.12.0.10affected
  • 3.10.0.0 to < 3.10.0.17affected
  • 3.4.0.0 to < 3.4.3.29affected

References