The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway do not properly escape separator characters when constructing cache keys. This flaw allows a remote attacker to manipulate cache keys, causing a cached response intended for one request to be served in response to a different request on the same Route. The vulnerability has a medium severity rating with a CVSS score of 6.3.