Search
Find a vulnerability
Search criteria
20 vulnerabilities found for gateway by envoyproxy
CVE-2026-53719 (GCVE-0-2026-53719)
Vulnerability from nvd – Published: 2026-09-14 20:13 – Updated: 2026-09-16 18:10
VLAI
EPSS
VEX
Title
Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization
Summary
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, translateSecurityPolicyForRoute in internal/gatewayapi/securitypolicy.go dereferences a nil authorization value when a namespace-scoped tenant creates a SecurityPolicy targeting a TCPRoute and omits spec.authorization. The persistent object triggers the panic on every reconcile; recovery in message/watchutil.go keeps the process alive but unwinds the runner/runner.go handle callback, stalling controller-wide xDS and infrastructure intermediate-representation publishing until an administrator deletes the object. The data plane continues to serve the last known good configuration while publication is stalled. This issue is fixed in versions 1.7.4 and 1.8.1.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-16 18:10 UTC
CWE
- CWE-476 - NULL Pointer Dereference
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://github.com/envoyproxy/gateway/security/ad… | x_refsource_CONFIRM |
| https://github.com/envoyproxy/gateway/pull/9171 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/pull/9172 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/pull/9173 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/5a78… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/96e2… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/b473… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/releases/ta… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/releases/ta… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| envoyproxy | gateway |
Affected:
< 1.7.4
Affected: >= 1.8.0-rc.0, < 1.8.1 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-53719",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-16T18:10:16.846518Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-16T18:10:27.491Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "gateway",
"vendor": "envoyproxy",
"versions": [
{
"status": "affected",
"version": "\u003c 1.7.4"
},
{
"status": "affected",
"version": "\u003e= 1.8.0-rc.0, \u003c 1.8.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, translateSecurityPolicyForRoute in internal/gatewayapi/securitypolicy.go dereferences a nil authorization value when a namespace-scoped tenant creates a SecurityPolicy targeting a TCPRoute and omits spec.authorization. The persistent object triggers the panic on every reconcile; recovery in message/watchutil.go keeps the process alive but unwinds the runner/runner.go handle callback, stalling controller-wide xDS and infrastructure intermediate-representation publishing until an administrator deletes the object. The data plane continues to serve the last known good configuration while publication is stalled. This issue is fixed in versions 1.7.4 and 1.8.1."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-476",
"description": "CWE-476: NULL Pointer Dereference",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:13:20.535Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-m2v6-2jmh-4c68",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-m2v6-2jmh-4c68"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9171",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9171"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9172",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9172"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9173",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9173"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/5a78db82b7cf4fc5bebbeda2c50952892038a464",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/5a78db82b7cf4fc5bebbeda2c50952892038a464"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/96e2b750868a459ace4b8b68e6a6e4fb0152b9b7",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/96e2b750868a459ace4b8b68e6a6e4fb0152b9b7"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/b4737180c7e597490c6363075c565fa8cf24eead",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/b4737180c7e597490c6363075c565fa8cf24eead"
},
{
"name": "https://github.com/envoyproxy/gateway/releases/tag/v1.7.4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/releases/tag/v1.7.4"
},
{
"name": "https://github.com/envoyproxy/gateway/releases/tag/v1.8.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/releases/tag/v1.8.1"
}
],
"source": {
"advisory": "GHSA-m2v6-2jmh-4c68",
"discovery": "UNKNOWN"
},
"title": "Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-53719",
"datePublished": "2026-09-14T20:13:20.535Z",
"dateReserved": "2026-06-10T16:43:31.241Z",
"dateUpdated": "2026-09-16T18:10:27.491Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-53718 (GCVE-0-2026-53718)
Vulnerability from nvd – Published: 2026-09-14 20:12 – Updated: 2026-09-15 13:55
VLAI
EPSS
VEX
Title
Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass
Summary
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, an HTTPRoute can use an extension-managed custom backendRef to reference a backend resource in another namespace without a matching Gateway API ReferenceGrant in the target namespace. The custom-backend branch in internal/gatewayapi/route.go omits validateBackendNamespace, allowing the route-owning namespace to bind to and use the resource without the backend namespace owner's consent and violating the Gateway API cross-namespace authorization model. This issue is fixed in versions 1.7.4 and 1.8.1.
Severity
6.4 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 13:25 UTC
CWE
- CWE-862 - Missing Authorization
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://github.com/envoyproxy/gateway/security/ad… | x_refsource_CONFIRM |
| https://github.com/envoyproxy/gateway/pull/9171 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/pull/9172 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/pull/9173 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/5a78… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/96e2… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/b473… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/releases/ta… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/releases/ta… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| envoyproxy | gateway |
Affected:
< 1.7.4
Affected: >= 1.8.0-rc.0, < 1.8.1 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-53718",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T13:25:21.526527Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T13:55:25.432Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "gateway",
"vendor": "envoyproxy",
"versions": [
{
"status": "affected",
"version": "\u003c 1.7.4"
},
{
"status": "affected",
"version": "\u003e= 1.8.0-rc.0, \u003c 1.8.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, an HTTPRoute can use an extension-managed custom backendRef to reference a backend resource in another namespace without a matching Gateway API ReferenceGrant in the target namespace. The custom-backend branch in internal/gatewayapi/route.go omits validateBackendNamespace, allowing the route-owning namespace to bind to and use the resource without the backend namespace owner\u0027s consent and violating the Gateway API cross-namespace authorization model. This issue is fixed in versions 1.7.4 and 1.8.1."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862: Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:12:12.224Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-fcrp-7gc2-93g7",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-fcrp-7gc2-93g7"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9171",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9171"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9172",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9172"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9173",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9173"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/5a78db82b7cf4fc5bebbeda2c50952892038a464",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/5a78db82b7cf4fc5bebbeda2c50952892038a464"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/96e2b750868a459ace4b8b68e6a6e4fb0152b9b7",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/96e2b750868a459ace4b8b68e6a6e4fb0152b9b7"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/b4737180c7e597490c6363075c565fa8cf24eead",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/b4737180c7e597490c6363075c565fa8cf24eead"
},
{
"name": "https://github.com/envoyproxy/gateway/releases/tag/v1.7.4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/releases/tag/v1.7.4"
},
{
"name": "https://github.com/envoyproxy/gateway/releases/tag/v1.8.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/releases/tag/v1.8.1"
}
],
"source": {
"advisory": "GHSA-fcrp-7gc2-93g7",
"discovery": "UNKNOWN"
},
"title": "Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-53718",
"datePublished": "2026-09-14T20:12:12.224Z",
"dateReserved": "2026-06-10T16:43:31.241Z",
"dateUpdated": "2026-09-15T13:55:25.432Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-53716 (GCVE-0-2026-53716)
Vulnerability from nvd – Published: 2026-09-14 20:15 – Updated: 2026-09-16 16:21
VLAI
EPSS
VEX
Title
Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit
Summary
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, getFileFromGZ in internal/wasm/httpfetcher.go calls io.ReadAll on a gzip.Reader without limiting decompressed output when a tenant-controlled EnvoyExtensionPolicy.spec.wasm[].code.http.url points to a reachable compressed Wasm payload. The 256 MiB compressed-input cap does not constrain the expanded size, no operator Wasm URL allowlist exists, and the optional sha256 check occurs only after decompression, so a comparatively small gzip stream can force a multi-gigabyte allocation in the shared controller. The resulting out-of-memory termination restarts the controller, re-reconciles the persistent custom resource, and can create a persistent cross-tenant control-plane outage. This issue is fixed in versions 1.7.4 and 1.8.1.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-16 16:21 UTC
CWE
- CWE-789 - Memory Allocation with Excessive Size Value
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://github.com/envoyproxy/gateway/security/ad… | x_refsource_CONFIRM |
| https://github.com/envoyproxy/gateway/pull/9171 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/pull/9172 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/pull/9173 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/5a78… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/96e2… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/b473… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/releases/ta… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/releases/ta… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| envoyproxy | gateway |
Affected:
< 1.7.4
Affected: >= 1.8.0-rc.0, < 1.8.1 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-53716",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-16T16:21:03.789017Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-16T16:21:20.674Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "gateway",
"vendor": "envoyproxy",
"versions": [
{
"status": "affected",
"version": "\u003c 1.7.4"
},
{
"status": "affected",
"version": "\u003e= 1.8.0-rc.0, \u003c 1.8.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, getFileFromGZ in internal/wasm/httpfetcher.go calls io.ReadAll on a gzip.Reader without limiting decompressed output when a tenant-controlled EnvoyExtensionPolicy.spec.wasm[].code.http.url points to a reachable compressed Wasm payload. The 256 MiB compressed-input cap does not constrain the expanded size, no operator Wasm URL allowlist exists, and the optional sha256 check occurs only after decompression, so a comparatively small gzip stream can force a multi-gigabyte allocation in the shared controller. The resulting out-of-memory termination restarts the controller, re-reconciles the persistent custom resource, and can create a persistent cross-tenant control-plane outage. This issue is fixed in versions 1.7.4 and 1.8.1."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-789",
"description": "CWE-789: Memory Allocation with Excessive Size Value",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:15:51.441Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-cxpq-8v7q-cg56",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-cxpq-8v7q-cg56"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9171",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9171"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9172",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9172"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9173",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9173"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/5a78db82b7cf4fc5bebbeda2c50952892038a464",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/5a78db82b7cf4fc5bebbeda2c50952892038a464"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/96e2b750868a459ace4b8b68e6a6e4fb0152b9b7",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/96e2b750868a459ace4b8b68e6a6e4fb0152b9b7"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/b4737180c7e597490c6363075c565fa8cf24eead",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/b4737180c7e597490c6363075c565fa8cf24eead"
},
{
"name": "https://github.com/envoyproxy/gateway/releases/tag/v1.7.4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/releases/tag/v1.7.4"
},
{
"name": "https://github.com/envoyproxy/gateway/releases/tag/v1.8.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/releases/tag/v1.8.1"
}
],
"source": {
"advisory": "GHSA-cxpq-8v7q-cg56",
"discovery": "UNKNOWN"
},
"title": "Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-53716",
"datePublished": "2026-09-14T20:15:51.441Z",
"dateReserved": "2026-06-10T16:43:31.241Z",
"dateUpdated": "2026-09-16T16:21:20.674Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-53715 (GCVE-0-2026-53715)
Vulnerability from nvd – Published: 2026-09-14 20:14 – Updated: 2026-09-15 14:35
VLAI
EPSS
VEX
Title
Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock
Summary
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, HTTPServer.ServeHTTP in internal/wasm/httpserver.go reads the plain mappingPath2Cache map without synchronization while HTTPServer.Get writes the same map during EnvoyExtensionPolicy translation. An attacker with pod-network access to unauthenticated port 18002 and tenant permission to churn policies with distinct Wasm URLs can flood GET requests until a per-request reader overlaps a writer. Go's concurrent map read and write detection invokes runtime.throw, which the net/http connection recovery cannot catch, terminating the controller process and causing a timing-dependent, cross-tenant control-plane denial of service until Kubernetes restarts the pod. This issue is fixed in versions 1.7.4 and 1.8.1.
Severity
5.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 14:26 UTC
CWE
- CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://github.com/envoyproxy/gateway/security/ad… | x_refsource_CONFIRM |
| https://github.com/envoyproxy/gateway/pull/9171 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/pull/9172 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/pull/9173 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/5a78… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/96e2… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/b473… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/releases/ta… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/releases/ta… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| envoyproxy | gateway |
Affected:
< 1.7.4
Affected: >= 1.8.0-rc.0, < 1.8.1 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-53715",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T14:26:08.978177Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T14:35:21.990Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "gateway",
"vendor": "envoyproxy",
"versions": [
{
"status": "affected",
"version": "\u003c 1.7.4"
},
{
"status": "affected",
"version": "\u003e= 1.8.0-rc.0, \u003c 1.8.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, HTTPServer.ServeHTTP in internal/wasm/httpserver.go reads the plain mappingPath2Cache map without synchronization while HTTPServer.Get writes the same map during EnvoyExtensionPolicy translation. An attacker with pod-network access to unauthenticated port 18002 and tenant permission to churn policies with distinct Wasm URLs can flood GET requests until a per-request reader overlaps a writer. Go\u0027s concurrent map read and write detection invokes runtime.throw, which the net/http connection recovery cannot catch, terminating the controller process and causing a timing-dependent, cross-tenant control-plane denial of service until Kubernetes restarts the pod. This issue is fixed in versions 1.7.4 and 1.8.1."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-362",
"description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:14:34.223Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-8fv2-88gg-hm7q",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-8fv2-88gg-hm7q"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9171",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9171"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9172",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9172"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9173",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9173"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/5a78db82b7cf4fc5bebbeda2c50952892038a464",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/5a78db82b7cf4fc5bebbeda2c50952892038a464"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/96e2b750868a459ace4b8b68e6a6e4fb0152b9b7",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/96e2b750868a459ace4b8b68e6a6e4fb0152b9b7"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/b4737180c7e597490c6363075c565fa8cf24eead",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/b4737180c7e597490c6363075c565fa8cf24eead"
},
{
"name": "https://github.com/envoyproxy/gateway/releases/tag/v1.7.4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/releases/tag/v1.7.4"
},
{
"name": "https://github.com/envoyproxy/gateway/releases/tag/v1.8.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/releases/tag/v1.8.1"
}
],
"source": {
"advisory": "GHSA-8fv2-88gg-hm7q",
"discovery": "UNKNOWN"
},
"title": "Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-53715",
"datePublished": "2026-09-14T20:14:34.223Z",
"dateReserved": "2026-06-10T16:43:31.241Z",
"dateUpdated": "2026-09-15T14:35:21.990Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-53714 (GCVE-0-2026-53714)
Vulnerability from nvd – Published: 2026-09-14 20:17 – Updated: 2026-09-15 19:28
VLAI
EPSS
VEX
Title
Envoy Gateway: xDS Control Plane Information Disclosure when Envoy Gateway operates in GatewayNamespaceMode
Summary
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, the xDS gRPC server in GatewayNamespaceMode, configured through provider.kubernetes.deploy.type=GatewayNamespace, installs a JWT StreamInterceptor but no UnaryInterceptor, leaving every unary Fetch RPC unauthenticated. The streaming interceptor also authenticates only discoveryv3.DeltaDiscoveryRequest messages; a discoveryv3.DiscoveryRequest used by the State-of-the-World protocol fails the type assertion and returns success without JWT validation. Any pod that can reach port 18000 can use the unauthenticated unary or State-of-the-World paths to retrieve TLS private keys through StreamSecrets, all xDS resources through StreamAggregatedResources, backend endpoints through StreamClusters or StreamEndpoints, and routing configuration through StreamRoutes or StreamListeners. This issue is fixed in versions 1.7.4 and 1.8.1.
Severity
7.4 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 19:28 UTC
CWE
- CWE-306 - Missing Authentication for Critical Function
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://github.com/envoyproxy/gateway/security/ad… | x_refsource_CONFIRM |
| https://github.com/envoyproxy/gateway/pull/8986 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/pull/9116 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/pull/9118 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/4df0… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/e912… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/f1f9… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/releases/ta… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/releases/ta… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| envoyproxy | gateway |
Affected:
< 1.7.4
Affected: >= 1.8.0-rc.0, < 1.8.1 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-53714",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T19:28:35.774243Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T19:28:46.968Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "gateway",
"vendor": "envoyproxy",
"versions": [
{
"status": "affected",
"version": "\u003c 1.7.4"
},
{
"status": "affected",
"version": "\u003e= 1.8.0-rc.0, \u003c 1.8.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, the xDS gRPC server in GatewayNamespaceMode, configured through provider.kubernetes.deploy.type=GatewayNamespace, installs a JWT StreamInterceptor but no UnaryInterceptor, leaving every unary Fetch RPC unauthenticated. The streaming interceptor also authenticates only discoveryv3.DeltaDiscoveryRequest messages; a discoveryv3.DiscoveryRequest used by the State-of-the-World protocol fails the type assertion and returns success without JWT validation. Any pod that can reach port 18000 can use the unauthenticated unary or State-of-the-World paths to retrieve TLS private keys through StreamSecrets, all xDS resources through StreamAggregatedResources, backend endpoints through StreamClusters or StreamEndpoints, and routing configuration through StreamRoutes or StreamListeners. This issue is fixed in versions 1.7.4 and 1.8.1."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306: Missing Authentication for Critical Function",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:17:22.256Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-22xc-xg2r-9j7v",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-22xc-xg2r-9j7v"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/8986",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/8986"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9116",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9116"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9118",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9118"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/4df0809ff1ed59ffb09604da4084335b8c6647c5",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/4df0809ff1ed59ffb09604da4084335b8c6647c5"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/e9124abc4ff4b63a218a6890c1b28a982c850465",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/e9124abc4ff4b63a218a6890c1b28a982c850465"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/f1f9829af2a231f0cae915c09800353c76622d97",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/f1f9829af2a231f0cae915c09800353c76622d97"
},
{
"name": "https://github.com/envoyproxy/gateway/releases/tag/v1.7.4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/releases/tag/v1.7.4"
},
{
"name": "https://github.com/envoyproxy/gateway/releases/tag/v1.8.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/releases/tag/v1.8.1"
}
],
"source": {
"advisory": "GHSA-22xc-xg2r-9j7v",
"discovery": "UNKNOWN"
},
"title": "Envoy Gateway: xDS Control Plane Information Disclosure when Envoy Gateway operates in GatewayNamespaceMode"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-53714",
"datePublished": "2026-09-14T20:17:22.256Z",
"dateReserved": "2026-06-10T16:43:31.241Z",
"dateUpdated": "2026-09-15T19:28:46.968Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-53713 (GCVE-0-2026-53713)
Vulnerability from nvd – Published: 2026-09-14 20:11 – Updated: 2026-09-16 18:34
VLAI
EPSS
VEX
Title
Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure
Summary
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, to_absolute_normalized_path in internal/gatewayapi/luavalidator/security.lua does not collapse redundant separators before is_critical_path evaluates Lua submitted through EnvoyExtensionPolicy during default Strict validation. Linux resolves a double-slash absolute path as the corresponding single-slash path, but the validator does not match the redundant-separator form, allowing submitted Lua to read arbitrary files from the gateway controller pod. Exposed files can include Kubernetes service-account tokens, TLS certificates, and process environment data, and the disclosed credentials can provide access to sensitive Kubernetes API Server or Gateway xDS server information. This issue is fixed in versions 1.7.4 and 1.8.1.
Severity
9.1 (Critical)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-16 18:34 UTC
CWE
- CWE-20 - Improper Input Validation
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://github.com/envoyproxy/gateway/security/ad… | x_refsource_CONFIRM |
| https://github.com/envoyproxy/gateway/pull/9171 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/pull/9172 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/pull/9173 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/5a78… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/96e2… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/b473… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/releases/ta… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/releases/ta… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| envoyproxy | gateway |
Affected:
< 1.7.4
Affected: >= 1.8.0-rc.0, < 1.8.1 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-53713",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-16T18:34:03.346532Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-16T18:34:11.830Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "gateway",
"vendor": "envoyproxy",
"versions": [
{
"status": "affected",
"version": "\u003c 1.7.4"
},
{
"status": "affected",
"version": "\u003e= 1.8.0-rc.0, \u003c 1.8.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, to_absolute_normalized_path in internal/gatewayapi/luavalidator/security.lua does not collapse redundant separators before is_critical_path evaluates Lua submitted through EnvoyExtensionPolicy during default Strict validation. Linux resolves a double-slash absolute path as the corresponding single-slash path, but the validator does not match the redundant-separator form, allowing submitted Lua to read arbitrary files from the gateway controller pod. Exposed files can include Kubernetes service-account tokens, TLS certificates, and process environment data, and the disclosed credentials can provide access to sensitive Kubernetes API Server or Gateway xDS server information. This issue is fixed in versions 1.7.4 and 1.8.1."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "CWE-20: Improper Input Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:11:02.561Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-wcrf-9vrr-854f",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-wcrf-9vrr-854f"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9171",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9171"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9172",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9172"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9173",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9173"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/5a78db82b7cf4fc5bebbeda2c50952892038a464",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/5a78db82b7cf4fc5bebbeda2c50952892038a464"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/96e2b750868a459ace4b8b68e6a6e4fb0152b9b7",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/96e2b750868a459ace4b8b68e6a6e4fb0152b9b7"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/b4737180c7e597490c6363075c565fa8cf24eead",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/b4737180c7e597490c6363075c565fa8cf24eead"
},
{
"name": "https://github.com/envoyproxy/gateway/releases/tag/v1.7.4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/releases/tag/v1.7.4"
},
{
"name": "https://github.com/envoyproxy/gateway/releases/tag/v1.8.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/releases/tag/v1.8.1"
}
],
"source": {
"advisory": "GHSA-wcrf-9vrr-854f",
"discovery": "UNKNOWN"
},
"title": "Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-53713",
"datePublished": "2026-09-14T20:11:02.561Z",
"dateReserved": "2026-06-10T16:43:31.241Z",
"dateUpdated": "2026-09-16T18:34:11.830Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-53717 (GCVE-0-2026-53717)
Vulnerability from nvd – Published: 2026-09-14 20:09 – Updated: 2026-09-15 19:30
VLAI
EPSS
VEX
Title
Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header
Summary
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, internal/wasm/imagefetcher.go follows tenant-controlled EnvoyExtensionPolicy spec.wasm[].code.image.url values to Docker or OCI Wasm layers, and extractWasmPluginBinary uses the untrusted tar-header h.Size value to allocate memory before validating the entry name or declared size. A small PAX or GNU tar header can therefore claim a multi-terabyte entry even though the surrounding LimitReader restricts only the bytes read from the stream, and no registry allowlist prevents a permitted tenant from selecting an attacker-controlled registry that the controller can reach. The allocation is attempted for every tar entry and can cause an unrecoverable Go runtime out-of-memory failure; because the custom resource persists, reconciliation repeatedly crash-loops the shared controller and causes a single-request, non-volumetric, cluster-wide control-plane denial of service. This issue is fixed in versions 1.7.4 and 1.8.1.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 19:29 UTC
CWE
- CWE-789 - Memory Allocation with Excessive Size Value
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://github.com/envoyproxy/gateway/security/ad… | x_refsource_CONFIRM |
| https://github.com/envoyproxy/gateway/pull/9171 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/pull/9172 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/pull/9173 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/5a78… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/96e2… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/b473… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/releases/ta… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/releases/ta… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| envoyproxy | gateway |
Affected:
< 1.7.4
Affected: >= 1.8.0-rc.0, < 1.8.1 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-53717",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T19:29:49.750607Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T19:30:12.383Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "gateway",
"vendor": "envoyproxy",
"versions": [
{
"status": "affected",
"version": "\u003c 1.7.4"
},
{
"status": "affected",
"version": "\u003e= 1.8.0-rc.0, \u003c 1.8.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, internal/wasm/imagefetcher.go follows tenant-controlled EnvoyExtensionPolicy spec.wasm[].code.image.url values to Docker or OCI Wasm layers, and extractWasmPluginBinary uses the untrusted tar-header h.Size value to allocate memory before validating the entry name or declared size. A small PAX or GNU tar header can therefore claim a multi-terabyte entry even though the surrounding LimitReader restricts only the bytes read from the stream, and no registry allowlist prevents a permitted tenant from selecting an attacker-controlled registry that the controller can reach. The allocation is attempted for every tar entry and can cause an unrecoverable Go runtime out-of-memory failure; because the custom resource persists, reconciliation repeatedly crash-loops the shared controller and causes a single-request, non-volumetric, cluster-wide control-plane denial of service. This issue is fixed in versions 1.7.4 and 1.8.1."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-789",
"description": "CWE-789: Memory Allocation with Excessive Size Value",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:09:44.990Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-h7pq-86h8-rp5x",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-h7pq-86h8-rp5x"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9171",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9171"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9172",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9172"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9173",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9173"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/5a78db82b7cf4fc5bebbeda2c50952892038a464",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/5a78db82b7cf4fc5bebbeda2c50952892038a464"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/96e2b750868a459ace4b8b68e6a6e4fb0152b9b7",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/96e2b750868a459ace4b8b68e6a6e4fb0152b9b7"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/b4737180c7e597490c6363075c565fa8cf24eead",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/b4737180c7e597490c6363075c565fa8cf24eead"
},
{
"name": "https://github.com/envoyproxy/gateway/releases/tag/v1.7.4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/releases/tag/v1.7.4"
},
{
"name": "https://github.com/envoyproxy/gateway/releases/tag/v1.8.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/releases/tag/v1.8.1"
}
],
"source": {
"advisory": "GHSA-h7pq-86h8-rp5x",
"discovery": "UNKNOWN"
},
"title": "Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-53717",
"datePublished": "2026-09-14T20:09:44.990Z",
"dateReserved": "2026-06-10T16:43:31.241Z",
"dateUpdated": "2026-09-15T19:30:12.383Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-22771 (GCVE-0-2026-22771)
Vulnerability from nvd – Published: 2026-01-12 18:08 – Updated: 2026-07-15 01:19
VLAI
EPSS
VEX
Title
Envoy Extension Policy lua scripts injection causes arbitrary command execution
Summary
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.5.7 and 1.6.2, EnvoyExtensionPolicy Lua scripts executed by Envoy proxy can be used to leak the proxy's credentials. These credentials can then be used to communicate with the control plane and gain access to all secrets that are used by Envoy proxy, e.g. TLS private keys and credentials used for downstream and upstream communication. This vulnerability is fixed in 1.5.7 and 1.6.2.
Severity
8.8 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-01-12 18:49 UTC
CWE
- CWE-94 - Improper Control of Generation of Code ('Code Injection')
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/envoyproxy/gateway/security/ad… | x_refsource_CONFIRM |
| https://access.redhat.com/security/cve/CVE-2026-22771 | vdb-entryx_refsource_REDHAT |
| https://bugzilla.redhat.com/show_bug.cgi?id=2428735 | issue-trackingx_refsource_REDHAT |
| https://security.access.redhat.com/data/csaf/v2/v… | x_sadp-csaf-vex |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| envoyproxy | gateway |
Affected:
< 1.5.7
Affected: >= 1.6.0-rc.0, < 1.6.2 |
|
| Red Hat | Red Hat Connectivity Link 1 |
cpe:/a:redhat:connectivity_link:1
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-22771",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-01-12T18:49:10.805589Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-01-12T18:49:19.868Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:connectivity_link:1"
],
"defaultStatus": "unaffected",
"packageName": "rhcl-1/rhcl-operator-bundle",
"product": "Red Hat Connectivity Link 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:connectivity_link:1"
],
"defaultStatus": "unaffected",
"packageName": "rhcl-1/rhcl-rhel9-operator",
"product": "Red Hat Connectivity Link 1",
"vendor": "Red Hat"
}
],
"datePublic": "2026-01-12T18:08:22.532Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in Envoy Gateway. EnvoyExtensionPolicy Lua scripts, when executed by the Envoy proxy, can be exploited to leak the proxy\u0027s credentials. An attacker can then use these credentials to communicate with the control plane and gain unauthorized access to all secrets managed by the Envoy proxy, including sensitive TLS private keys. This vulnerability leads to critical information disclosure, potentially compromising the security of communications."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-15T01:19:24.781Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-22771"
},
{
"name": "RHBZ#2428735",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428735"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22771.json"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-01-12T19:01:29.001Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-01-12T18:08:22.532Z",
"value": "Made public."
}
],
"title": "envoyproxy/gateway: Envoy Gateway: Unauthorized access to secrets via Lua script credential leakage",
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"product": "gateway",
"vendor": "envoyproxy",
"versions": [
{
"status": "affected",
"version": "\u003c 1.5.7"
},
{
"status": "affected",
"version": "\u003e= 1.6.0-rc.0, \u003c 1.6.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.5.7 and 1.6.2, EnvoyExtensionPolicy Lua scripts executed by Envoy proxy can be used to leak the proxy\u0027s credentials. These credentials can then be used to communicate with the control plane and gain access to all secrets that are used by Envoy proxy, e.g. TLS private keys and credentials used for downstream and upstream communication. This vulnerability is fixed in 1.5.7 and 1.6.2."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-01-12T18:08:22.532Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-xrwg-mqj6-6m22",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-xrwg-mqj6-6m22"
}
],
"source": {
"advisory": "GHSA-xrwg-mqj6-6m22",
"discovery": "UNKNOWN"
},
"title": "Envoy Extension Policy lua scripts injection causes arbitrary command execution"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-22771",
"datePublished": "2026-01-12T18:08:22.532Z",
"dateReserved": "2026-01-09T18:27:19.387Z",
"dateUpdated": "2026-07-15T01:19:24.781Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-25294 (GCVE-0-2025-25294)
Vulnerability from nvd – Published: 2025-03-06 18:46 – Updated: 2025-03-06 20:34
VLAI
EPSS
VEX
Title
Envoy Gateway Log Injection Vulnerability
Summary
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. In all Envoy Gateway versions prior to 1.2.7 and 1.3.1 a default Envoy Proxy access log configuration is used. This format is vulnerable to log injection attacks. If the attacker uses a specially crafted user-agent which performs json injection, then he could add and overwrite fields to the access log. This vulnerability is fixed in 1.3.1 and 1.2.7. One can overwrite the old text based default format with JSON formatter by modifying the "EnvoyProxy.spec.telemetry.accessLog" setting.
Severity
5.3 (Medium)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-03-06 20:33 UTC
CWE
- CWE-117 - Improper Output Neutralization for Logs
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://github.com/envoyproxy/gateway/security/ad… | x_refsource_CONFIRM |
| https://github.com/envoyproxy/gateway/commit/8f48… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| envoyproxy | gateway |
Affected:
>= 1.3.0-rc.1, < 1.3.1
Affected: < 1.2.7 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-25294",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-03-06T20:33:40.307756Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-03-06T20:34:27.649Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "gateway",
"vendor": "envoyproxy",
"versions": [
{
"status": "affected",
"version": "\u003e= 1.3.0-rc.1, \u003c 1.3.1"
},
{
"status": "affected",
"version": "\u003c 1.2.7"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. In all Envoy Gateway versions prior to 1.2.7 and 1.3.1 a default Envoy Proxy access log configuration is used. This format is vulnerable to log injection attacks. If the attacker uses a specially crafted user-agent which performs json injection, then he could add and overwrite fields to the access log. This vulnerability is fixed in 1.3.1 and 1.2.7. One can overwrite the old text based default format with JSON formatter by modifying the \"EnvoyProxy.spec.telemetry.accessLog\" setting."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-117",
"description": "CWE-117: Improper Output Neutralization for Logs",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-03-06T18:46:23.913Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-mf24-chxh-hmvj",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-mf24-chxh-hmvj"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/8f48f5199cf1bbb9a8ac0695c5171bfef6c9198a",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/8f48f5199cf1bbb9a8ac0695c5171bfef6c9198a"
}
],
"source": {
"advisory": "GHSA-mf24-chxh-hmvj",
"discovery": "UNKNOWN"
},
"title": "Envoy Gateway Log Injection Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2025-25294",
"datePublished": "2025-03-06T18:46:23.913Z",
"dateReserved": "2025-02-06T17:13:33.122Z",
"dateUpdated": "2025-03-06T20:34:27.649Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2025-24030 (GCVE-0-2025-24030)
Vulnerability from nvd – Published: 2025-01-23 03:20 – Updated: 2025-01-23 14:58
VLAI
EPSS
VEX
Title
Envoy Admin Interface Exposed through prometheus metrics endpoint
Summary
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. A user with access to the Kubernetes cluster can use a path traversal attack to execute Envoy Admin interface commands on proxies managed by any version of Envoy Gateway prior to 1.2.6. The admin interface can be used to terminate the Envoy process and extract the Envoy configuration (possibly containing confidential data). Version 1.2.6 fixes the issue. As a workaround, the `EnvoyProxy` API can be used to apply a bootstrap config patch that restricts access strictly to the prometheus stats endpoint. Find below an example of such a bootstrap patch.
Severity
7.1 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-01-23 14:58 UTC
CWE
- CWE-419 - Unprotected Primary Channel
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/envoyproxy/gateway/security/ad… | x_refsource_CONFIRM |
| https://github.com/envoyproxy/gateway/commit/3eb3… | x_refsource_MISC |
| https://www.envoyproxy.io/docs/envoy/latest/confi… | x_refsource_MISC |
| https://www.envoyproxy.io/docs/envoy/latest/opera… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| envoyproxy | gateway |
Affected:
< 1.2.6
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-24030",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-01-23T14:58:52.009540Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-01-23T14:58:59.485Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "gateway",
"vendor": "envoyproxy",
"versions": [
{
"status": "affected",
"version": "\u003c 1.2.6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. A user with access to the Kubernetes cluster can use a path traversal attack to execute Envoy Admin interface commands on proxies managed by any version of Envoy Gateway prior to 1.2.6. The admin interface can be used to terminate the Envoy process and extract the Envoy configuration (possibly containing confidential data). Version 1.2.6 fixes the issue. As a workaround, the `EnvoyProxy` API can be used to apply a bootstrap config patch that restricts access strictly to the prometheus stats endpoint. Find below an example of such a bootstrap patch."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-419",
"description": "CWE-419: Unprotected Primary Channel",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-01-23T03:20:27.802Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-j777-63hf-hx76",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-j777-63hf-hx76"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/3eb3301ab3dbf12b201b47bdb6074d1233be07bd",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/3eb3301ab3dbf12b201b47bdb6074d1233be07bd"
},
{
"name": "https://www.envoyproxy.io/docs/envoy/latest/configuration/best_practices/edge",
"tags": [
"x_refsource_MISC"
],
"url": "https://www.envoyproxy.io/docs/envoy/latest/configuration/best_practices/edge"
},
{
"name": "https://www.envoyproxy.io/docs/envoy/latest/operations/admin",
"tags": [
"x_refsource_MISC"
],
"url": "https://www.envoyproxy.io/docs/envoy/latest/operations/admin"
}
],
"source": {
"advisory": "GHSA-j777-63hf-hx76",
"discovery": "UNKNOWN"
},
"title": "Envoy Admin Interface Exposed through prometheus metrics endpoint"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2025-24030",
"datePublished": "2025-01-23T03:20:27.802Z",
"dateReserved": "2025-01-16T17:31:06.460Z",
"dateUpdated": "2025-01-23T14:58:59.485Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2026-53714 (GCVE-0-2026-53714)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:17 – Updated: 2026-09-15 19:28
VLAI
EPSS
VEX
Title
Envoy Gateway: xDS Control Plane Information Disclosure when Envoy Gateway operates in GatewayNamespaceMode
Summary
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, the xDS gRPC server in GatewayNamespaceMode, configured through provider.kubernetes.deploy.type=GatewayNamespace, installs a JWT StreamInterceptor but no UnaryInterceptor, leaving every unary Fetch RPC unauthenticated. The streaming interceptor also authenticates only discoveryv3.DeltaDiscoveryRequest messages; a discoveryv3.DiscoveryRequest used by the State-of-the-World protocol fails the type assertion and returns success without JWT validation. Any pod that can reach port 18000 can use the unauthenticated unary or State-of-the-World paths to retrieve TLS private keys through StreamSecrets, all xDS resources through StreamAggregatedResources, backend endpoints through StreamClusters or StreamEndpoints, and routing configuration through StreamRoutes or StreamListeners. This issue is fixed in versions 1.7.4 and 1.8.1.
Severity
7.4 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 19:28 UTC
CWE
- CWE-306 - Missing Authentication for Critical Function
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://github.com/envoyproxy/gateway/security/ad… | x_refsource_CONFIRM |
| https://github.com/envoyproxy/gateway/pull/8986 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/pull/9116 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/pull/9118 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/4df0… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/e912… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/f1f9… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/releases/ta… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/releases/ta… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| envoyproxy | gateway |
Affected:
< 1.7.4
Affected: >= 1.8.0-rc.0, < 1.8.1 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-53714",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T19:28:35.774243Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T19:28:46.968Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "gateway",
"vendor": "envoyproxy",
"versions": [
{
"status": "affected",
"version": "\u003c 1.7.4"
},
{
"status": "affected",
"version": "\u003e= 1.8.0-rc.0, \u003c 1.8.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, the xDS gRPC server in GatewayNamespaceMode, configured through provider.kubernetes.deploy.type=GatewayNamespace, installs a JWT StreamInterceptor but no UnaryInterceptor, leaving every unary Fetch RPC unauthenticated. The streaming interceptor also authenticates only discoveryv3.DeltaDiscoveryRequest messages; a discoveryv3.DiscoveryRequest used by the State-of-the-World protocol fails the type assertion and returns success without JWT validation. Any pod that can reach port 18000 can use the unauthenticated unary or State-of-the-World paths to retrieve TLS private keys through StreamSecrets, all xDS resources through StreamAggregatedResources, backend endpoints through StreamClusters or StreamEndpoints, and routing configuration through StreamRoutes or StreamListeners. This issue is fixed in versions 1.7.4 and 1.8.1."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306: Missing Authentication for Critical Function",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:17:22.256Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-22xc-xg2r-9j7v",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-22xc-xg2r-9j7v"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/8986",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/8986"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9116",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9116"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9118",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9118"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/4df0809ff1ed59ffb09604da4084335b8c6647c5",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/4df0809ff1ed59ffb09604da4084335b8c6647c5"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/e9124abc4ff4b63a218a6890c1b28a982c850465",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/e9124abc4ff4b63a218a6890c1b28a982c850465"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/f1f9829af2a231f0cae915c09800353c76622d97",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/f1f9829af2a231f0cae915c09800353c76622d97"
},
{
"name": "https://github.com/envoyproxy/gateway/releases/tag/v1.7.4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/releases/tag/v1.7.4"
},
{
"name": "https://github.com/envoyproxy/gateway/releases/tag/v1.8.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/releases/tag/v1.8.1"
}
],
"source": {
"advisory": "GHSA-22xc-xg2r-9j7v",
"discovery": "UNKNOWN"
},
"title": "Envoy Gateway: xDS Control Plane Information Disclosure when Envoy Gateway operates in GatewayNamespaceMode"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-53714",
"datePublished": "2026-09-14T20:17:22.256Z",
"dateReserved": "2026-06-10T16:43:31.241Z",
"dateUpdated": "2026-09-15T19:28:46.968Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-53716 (GCVE-0-2026-53716)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:15 – Updated: 2026-09-16 16:21
VLAI
EPSS
VEX
Title
Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit
Summary
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, getFileFromGZ in internal/wasm/httpfetcher.go calls io.ReadAll on a gzip.Reader without limiting decompressed output when a tenant-controlled EnvoyExtensionPolicy.spec.wasm[].code.http.url points to a reachable compressed Wasm payload. The 256 MiB compressed-input cap does not constrain the expanded size, no operator Wasm URL allowlist exists, and the optional sha256 check occurs only after decompression, so a comparatively small gzip stream can force a multi-gigabyte allocation in the shared controller. The resulting out-of-memory termination restarts the controller, re-reconciles the persistent custom resource, and can create a persistent cross-tenant control-plane outage. This issue is fixed in versions 1.7.4 and 1.8.1.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-16 16:21 UTC
CWE
- CWE-789 - Memory Allocation with Excessive Size Value
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://github.com/envoyproxy/gateway/security/ad… | x_refsource_CONFIRM |
| https://github.com/envoyproxy/gateway/pull/9171 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/pull/9172 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/pull/9173 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/5a78… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/96e2… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/b473… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/releases/ta… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/releases/ta… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| envoyproxy | gateway |
Affected:
< 1.7.4
Affected: >= 1.8.0-rc.0, < 1.8.1 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-53716",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-16T16:21:03.789017Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-16T16:21:20.674Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "gateway",
"vendor": "envoyproxy",
"versions": [
{
"status": "affected",
"version": "\u003c 1.7.4"
},
{
"status": "affected",
"version": "\u003e= 1.8.0-rc.0, \u003c 1.8.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, getFileFromGZ in internal/wasm/httpfetcher.go calls io.ReadAll on a gzip.Reader without limiting decompressed output when a tenant-controlled EnvoyExtensionPolicy.spec.wasm[].code.http.url points to a reachable compressed Wasm payload. The 256 MiB compressed-input cap does not constrain the expanded size, no operator Wasm URL allowlist exists, and the optional sha256 check occurs only after decompression, so a comparatively small gzip stream can force a multi-gigabyte allocation in the shared controller. The resulting out-of-memory termination restarts the controller, re-reconciles the persistent custom resource, and can create a persistent cross-tenant control-plane outage. This issue is fixed in versions 1.7.4 and 1.8.1."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-789",
"description": "CWE-789: Memory Allocation with Excessive Size Value",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:15:51.441Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-cxpq-8v7q-cg56",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-cxpq-8v7q-cg56"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9171",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9171"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9172",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9172"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9173",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9173"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/5a78db82b7cf4fc5bebbeda2c50952892038a464",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/5a78db82b7cf4fc5bebbeda2c50952892038a464"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/96e2b750868a459ace4b8b68e6a6e4fb0152b9b7",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/96e2b750868a459ace4b8b68e6a6e4fb0152b9b7"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/b4737180c7e597490c6363075c565fa8cf24eead",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/b4737180c7e597490c6363075c565fa8cf24eead"
},
{
"name": "https://github.com/envoyproxy/gateway/releases/tag/v1.7.4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/releases/tag/v1.7.4"
},
{
"name": "https://github.com/envoyproxy/gateway/releases/tag/v1.8.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/releases/tag/v1.8.1"
}
],
"source": {
"advisory": "GHSA-cxpq-8v7q-cg56",
"discovery": "UNKNOWN"
},
"title": "Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-53716",
"datePublished": "2026-09-14T20:15:51.441Z",
"dateReserved": "2026-06-10T16:43:31.241Z",
"dateUpdated": "2026-09-16T16:21:20.674Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-53715 (GCVE-0-2026-53715)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:14 – Updated: 2026-09-15 14:35
VLAI
EPSS
VEX
Title
Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock
Summary
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, HTTPServer.ServeHTTP in internal/wasm/httpserver.go reads the plain mappingPath2Cache map without synchronization while HTTPServer.Get writes the same map during EnvoyExtensionPolicy translation. An attacker with pod-network access to unauthenticated port 18002 and tenant permission to churn policies with distinct Wasm URLs can flood GET requests until a per-request reader overlaps a writer. Go's concurrent map read and write detection invokes runtime.throw, which the net/http connection recovery cannot catch, terminating the controller process and causing a timing-dependent, cross-tenant control-plane denial of service until Kubernetes restarts the pod. This issue is fixed in versions 1.7.4 and 1.8.1.
Severity
5.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 14:26 UTC
CWE
- CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://github.com/envoyproxy/gateway/security/ad… | x_refsource_CONFIRM |
| https://github.com/envoyproxy/gateway/pull/9171 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/pull/9172 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/pull/9173 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/5a78… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/96e2… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/b473… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/releases/ta… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/releases/ta… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| envoyproxy | gateway |
Affected:
< 1.7.4
Affected: >= 1.8.0-rc.0, < 1.8.1 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-53715",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T14:26:08.978177Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T14:35:21.990Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "gateway",
"vendor": "envoyproxy",
"versions": [
{
"status": "affected",
"version": "\u003c 1.7.4"
},
{
"status": "affected",
"version": "\u003e= 1.8.0-rc.0, \u003c 1.8.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, HTTPServer.ServeHTTP in internal/wasm/httpserver.go reads the plain mappingPath2Cache map without synchronization while HTTPServer.Get writes the same map during EnvoyExtensionPolicy translation. An attacker with pod-network access to unauthenticated port 18002 and tenant permission to churn policies with distinct Wasm URLs can flood GET requests until a per-request reader overlaps a writer. Go\u0027s concurrent map read and write detection invokes runtime.throw, which the net/http connection recovery cannot catch, terminating the controller process and causing a timing-dependent, cross-tenant control-plane denial of service until Kubernetes restarts the pod. This issue is fixed in versions 1.7.4 and 1.8.1."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-362",
"description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:14:34.223Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-8fv2-88gg-hm7q",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-8fv2-88gg-hm7q"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9171",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9171"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9172",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9172"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9173",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9173"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/5a78db82b7cf4fc5bebbeda2c50952892038a464",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/5a78db82b7cf4fc5bebbeda2c50952892038a464"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/96e2b750868a459ace4b8b68e6a6e4fb0152b9b7",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/96e2b750868a459ace4b8b68e6a6e4fb0152b9b7"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/b4737180c7e597490c6363075c565fa8cf24eead",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/b4737180c7e597490c6363075c565fa8cf24eead"
},
{
"name": "https://github.com/envoyproxy/gateway/releases/tag/v1.7.4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/releases/tag/v1.7.4"
},
{
"name": "https://github.com/envoyproxy/gateway/releases/tag/v1.8.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/releases/tag/v1.8.1"
}
],
"source": {
"advisory": "GHSA-8fv2-88gg-hm7q",
"discovery": "UNKNOWN"
},
"title": "Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-53715",
"datePublished": "2026-09-14T20:14:34.223Z",
"dateReserved": "2026-06-10T16:43:31.241Z",
"dateUpdated": "2026-09-15T14:35:21.990Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-53719 (GCVE-0-2026-53719)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:13 – Updated: 2026-09-16 18:10
VLAI
EPSS
VEX
Title
Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization
Summary
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, translateSecurityPolicyForRoute in internal/gatewayapi/securitypolicy.go dereferences a nil authorization value when a namespace-scoped tenant creates a SecurityPolicy targeting a TCPRoute and omits spec.authorization. The persistent object triggers the panic on every reconcile; recovery in message/watchutil.go keeps the process alive but unwinds the runner/runner.go handle callback, stalling controller-wide xDS and infrastructure intermediate-representation publishing until an administrator deletes the object. The data plane continues to serve the last known good configuration while publication is stalled. This issue is fixed in versions 1.7.4 and 1.8.1.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-16 18:10 UTC
CWE
- CWE-476 - NULL Pointer Dereference
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://github.com/envoyproxy/gateway/security/ad… | x_refsource_CONFIRM |
| https://github.com/envoyproxy/gateway/pull/9171 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/pull/9172 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/pull/9173 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/5a78… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/96e2… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/b473… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/releases/ta… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/releases/ta… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| envoyproxy | gateway |
Affected:
< 1.7.4
Affected: >= 1.8.0-rc.0, < 1.8.1 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-53719",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-16T18:10:16.846518Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-16T18:10:27.491Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "gateway",
"vendor": "envoyproxy",
"versions": [
{
"status": "affected",
"version": "\u003c 1.7.4"
},
{
"status": "affected",
"version": "\u003e= 1.8.0-rc.0, \u003c 1.8.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, translateSecurityPolicyForRoute in internal/gatewayapi/securitypolicy.go dereferences a nil authorization value when a namespace-scoped tenant creates a SecurityPolicy targeting a TCPRoute and omits spec.authorization. The persistent object triggers the panic on every reconcile; recovery in message/watchutil.go keeps the process alive but unwinds the runner/runner.go handle callback, stalling controller-wide xDS and infrastructure intermediate-representation publishing until an administrator deletes the object. The data plane continues to serve the last known good configuration while publication is stalled. This issue is fixed in versions 1.7.4 and 1.8.1."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-476",
"description": "CWE-476: NULL Pointer Dereference",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:13:20.535Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-m2v6-2jmh-4c68",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-m2v6-2jmh-4c68"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9171",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9171"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9172",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9172"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9173",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9173"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/5a78db82b7cf4fc5bebbeda2c50952892038a464",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/5a78db82b7cf4fc5bebbeda2c50952892038a464"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/96e2b750868a459ace4b8b68e6a6e4fb0152b9b7",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/96e2b750868a459ace4b8b68e6a6e4fb0152b9b7"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/b4737180c7e597490c6363075c565fa8cf24eead",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/b4737180c7e597490c6363075c565fa8cf24eead"
},
{
"name": "https://github.com/envoyproxy/gateway/releases/tag/v1.7.4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/releases/tag/v1.7.4"
},
{
"name": "https://github.com/envoyproxy/gateway/releases/tag/v1.8.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/releases/tag/v1.8.1"
}
],
"source": {
"advisory": "GHSA-m2v6-2jmh-4c68",
"discovery": "UNKNOWN"
},
"title": "Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-53719",
"datePublished": "2026-09-14T20:13:20.535Z",
"dateReserved": "2026-06-10T16:43:31.241Z",
"dateUpdated": "2026-09-16T18:10:27.491Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-53718 (GCVE-0-2026-53718)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:12 – Updated: 2026-09-15 13:55
VLAI
EPSS
VEX
Title
Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass
Summary
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, an HTTPRoute can use an extension-managed custom backendRef to reference a backend resource in another namespace without a matching Gateway API ReferenceGrant in the target namespace. The custom-backend branch in internal/gatewayapi/route.go omits validateBackendNamespace, allowing the route-owning namespace to bind to and use the resource without the backend namespace owner's consent and violating the Gateway API cross-namespace authorization model. This issue is fixed in versions 1.7.4 and 1.8.1.
Severity
6.4 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 13:25 UTC
CWE
- CWE-862 - Missing Authorization
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://github.com/envoyproxy/gateway/security/ad… | x_refsource_CONFIRM |
| https://github.com/envoyproxy/gateway/pull/9171 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/pull/9172 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/pull/9173 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/5a78… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/96e2… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/b473… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/releases/ta… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/releases/ta… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| envoyproxy | gateway |
Affected:
< 1.7.4
Affected: >= 1.8.0-rc.0, < 1.8.1 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-53718",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T13:25:21.526527Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T13:55:25.432Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "gateway",
"vendor": "envoyproxy",
"versions": [
{
"status": "affected",
"version": "\u003c 1.7.4"
},
{
"status": "affected",
"version": "\u003e= 1.8.0-rc.0, \u003c 1.8.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, an HTTPRoute can use an extension-managed custom backendRef to reference a backend resource in another namespace without a matching Gateway API ReferenceGrant in the target namespace. The custom-backend branch in internal/gatewayapi/route.go omits validateBackendNamespace, allowing the route-owning namespace to bind to and use the resource without the backend namespace owner\u0027s consent and violating the Gateway API cross-namespace authorization model. This issue is fixed in versions 1.7.4 and 1.8.1."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862: Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:12:12.224Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-fcrp-7gc2-93g7",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-fcrp-7gc2-93g7"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9171",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9171"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9172",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9172"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9173",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9173"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/5a78db82b7cf4fc5bebbeda2c50952892038a464",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/5a78db82b7cf4fc5bebbeda2c50952892038a464"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/96e2b750868a459ace4b8b68e6a6e4fb0152b9b7",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/96e2b750868a459ace4b8b68e6a6e4fb0152b9b7"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/b4737180c7e597490c6363075c565fa8cf24eead",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/b4737180c7e597490c6363075c565fa8cf24eead"
},
{
"name": "https://github.com/envoyproxy/gateway/releases/tag/v1.7.4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/releases/tag/v1.7.4"
},
{
"name": "https://github.com/envoyproxy/gateway/releases/tag/v1.8.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/releases/tag/v1.8.1"
}
],
"source": {
"advisory": "GHSA-fcrp-7gc2-93g7",
"discovery": "UNKNOWN"
},
"title": "Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-53718",
"datePublished": "2026-09-14T20:12:12.224Z",
"dateReserved": "2026-06-10T16:43:31.241Z",
"dateUpdated": "2026-09-15T13:55:25.432Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-53713 (GCVE-0-2026-53713)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:11 – Updated: 2026-09-16 18:34
VLAI
EPSS
VEX
Title
Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure
Summary
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, to_absolute_normalized_path in internal/gatewayapi/luavalidator/security.lua does not collapse redundant separators before is_critical_path evaluates Lua submitted through EnvoyExtensionPolicy during default Strict validation. Linux resolves a double-slash absolute path as the corresponding single-slash path, but the validator does not match the redundant-separator form, allowing submitted Lua to read arbitrary files from the gateway controller pod. Exposed files can include Kubernetes service-account tokens, TLS certificates, and process environment data, and the disclosed credentials can provide access to sensitive Kubernetes API Server or Gateway xDS server information. This issue is fixed in versions 1.7.4 and 1.8.1.
Severity
9.1 (Critical)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-16 18:34 UTC
CWE
- CWE-20 - Improper Input Validation
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://github.com/envoyproxy/gateway/security/ad… | x_refsource_CONFIRM |
| https://github.com/envoyproxy/gateway/pull/9171 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/pull/9172 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/pull/9173 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/5a78… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/96e2… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/b473… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/releases/ta… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/releases/ta… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| envoyproxy | gateway |
Affected:
< 1.7.4
Affected: >= 1.8.0-rc.0, < 1.8.1 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-53713",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-16T18:34:03.346532Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-16T18:34:11.830Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "gateway",
"vendor": "envoyproxy",
"versions": [
{
"status": "affected",
"version": "\u003c 1.7.4"
},
{
"status": "affected",
"version": "\u003e= 1.8.0-rc.0, \u003c 1.8.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, to_absolute_normalized_path in internal/gatewayapi/luavalidator/security.lua does not collapse redundant separators before is_critical_path evaluates Lua submitted through EnvoyExtensionPolicy during default Strict validation. Linux resolves a double-slash absolute path as the corresponding single-slash path, but the validator does not match the redundant-separator form, allowing submitted Lua to read arbitrary files from the gateway controller pod. Exposed files can include Kubernetes service-account tokens, TLS certificates, and process environment data, and the disclosed credentials can provide access to sensitive Kubernetes API Server or Gateway xDS server information. This issue is fixed in versions 1.7.4 and 1.8.1."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "CWE-20: Improper Input Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:11:02.561Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-wcrf-9vrr-854f",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-wcrf-9vrr-854f"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9171",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9171"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9172",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9172"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9173",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9173"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/5a78db82b7cf4fc5bebbeda2c50952892038a464",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/5a78db82b7cf4fc5bebbeda2c50952892038a464"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/96e2b750868a459ace4b8b68e6a6e4fb0152b9b7",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/96e2b750868a459ace4b8b68e6a6e4fb0152b9b7"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/b4737180c7e597490c6363075c565fa8cf24eead",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/b4737180c7e597490c6363075c565fa8cf24eead"
},
{
"name": "https://github.com/envoyproxy/gateway/releases/tag/v1.7.4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/releases/tag/v1.7.4"
},
{
"name": "https://github.com/envoyproxy/gateway/releases/tag/v1.8.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/releases/tag/v1.8.1"
}
],
"source": {
"advisory": "GHSA-wcrf-9vrr-854f",
"discovery": "UNKNOWN"
},
"title": "Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-53713",
"datePublished": "2026-09-14T20:11:02.561Z",
"dateReserved": "2026-06-10T16:43:31.241Z",
"dateUpdated": "2026-09-16T18:34:11.830Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-53717 (GCVE-0-2026-53717)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:09 – Updated: 2026-09-15 19:30
VLAI
EPSS
VEX
Title
Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header
Summary
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, internal/wasm/imagefetcher.go follows tenant-controlled EnvoyExtensionPolicy spec.wasm[].code.image.url values to Docker or OCI Wasm layers, and extractWasmPluginBinary uses the untrusted tar-header h.Size value to allocate memory before validating the entry name or declared size. A small PAX or GNU tar header can therefore claim a multi-terabyte entry even though the surrounding LimitReader restricts only the bytes read from the stream, and no registry allowlist prevents a permitted tenant from selecting an attacker-controlled registry that the controller can reach. The allocation is attempted for every tar entry and can cause an unrecoverable Go runtime out-of-memory failure; because the custom resource persists, reconciliation repeatedly crash-loops the shared controller and causes a single-request, non-volumetric, cluster-wide control-plane denial of service. This issue is fixed in versions 1.7.4 and 1.8.1.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 19:29 UTC
CWE
- CWE-789 - Memory Allocation with Excessive Size Value
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://github.com/envoyproxy/gateway/security/ad… | x_refsource_CONFIRM |
| https://github.com/envoyproxy/gateway/pull/9171 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/pull/9172 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/pull/9173 | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/5a78… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/96e2… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/commit/b473… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/releases/ta… | x_refsource_MISC |
| https://github.com/envoyproxy/gateway/releases/ta… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| envoyproxy | gateway |
Affected:
< 1.7.4
Affected: >= 1.8.0-rc.0, < 1.8.1 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-53717",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T19:29:49.750607Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T19:30:12.383Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "gateway",
"vendor": "envoyproxy",
"versions": [
{
"status": "affected",
"version": "\u003c 1.7.4"
},
{
"status": "affected",
"version": "\u003e= 1.8.0-rc.0, \u003c 1.8.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, internal/wasm/imagefetcher.go follows tenant-controlled EnvoyExtensionPolicy spec.wasm[].code.image.url values to Docker or OCI Wasm layers, and extractWasmPluginBinary uses the untrusted tar-header h.Size value to allocate memory before validating the entry name or declared size. A small PAX or GNU tar header can therefore claim a multi-terabyte entry even though the surrounding LimitReader restricts only the bytes read from the stream, and no registry allowlist prevents a permitted tenant from selecting an attacker-controlled registry that the controller can reach. The allocation is attempted for every tar entry and can cause an unrecoverable Go runtime out-of-memory failure; because the custom resource persists, reconciliation repeatedly crash-loops the shared controller and causes a single-request, non-volumetric, cluster-wide control-plane denial of service. This issue is fixed in versions 1.7.4 and 1.8.1."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-789",
"description": "CWE-789: Memory Allocation with Excessive Size Value",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:09:44.990Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-h7pq-86h8-rp5x",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-h7pq-86h8-rp5x"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9171",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9171"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9172",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9172"
},
{
"name": "https://github.com/envoyproxy/gateway/pull/9173",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/pull/9173"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/5a78db82b7cf4fc5bebbeda2c50952892038a464",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/5a78db82b7cf4fc5bebbeda2c50952892038a464"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/96e2b750868a459ace4b8b68e6a6e4fb0152b9b7",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/96e2b750868a459ace4b8b68e6a6e4fb0152b9b7"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/b4737180c7e597490c6363075c565fa8cf24eead",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/b4737180c7e597490c6363075c565fa8cf24eead"
},
{
"name": "https://github.com/envoyproxy/gateway/releases/tag/v1.7.4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/releases/tag/v1.7.4"
},
{
"name": "https://github.com/envoyproxy/gateway/releases/tag/v1.8.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/releases/tag/v1.8.1"
}
],
"source": {
"advisory": "GHSA-h7pq-86h8-rp5x",
"discovery": "UNKNOWN"
},
"title": "Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-53717",
"datePublished": "2026-09-14T20:09:44.990Z",
"dateReserved": "2026-06-10T16:43:31.241Z",
"dateUpdated": "2026-09-15T19:30:12.383Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-22771 (GCVE-0-2026-22771)
Vulnerability from cvelistv5 – Published: 2026-01-12 18:08 – Updated: 2026-07-15 01:19
VLAI
EPSS
VEX
Title
Envoy Extension Policy lua scripts injection causes arbitrary command execution
Summary
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.5.7 and 1.6.2, EnvoyExtensionPolicy Lua scripts executed by Envoy proxy can be used to leak the proxy's credentials. These credentials can then be used to communicate with the control plane and gain access to all secrets that are used by Envoy proxy, e.g. TLS private keys and credentials used for downstream and upstream communication. This vulnerability is fixed in 1.5.7 and 1.6.2.
Severity
8.8 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-01-12 18:49 UTC
CWE
- CWE-94 - Improper Control of Generation of Code ('Code Injection')
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/envoyproxy/gateway/security/ad… | x_refsource_CONFIRM |
| https://access.redhat.com/security/cve/CVE-2026-22771 | vdb-entryx_refsource_REDHAT |
| https://bugzilla.redhat.com/show_bug.cgi?id=2428735 | issue-trackingx_refsource_REDHAT |
| https://security.access.redhat.com/data/csaf/v2/v… | x_sadp-csaf-vex |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| envoyproxy | gateway |
Affected:
< 1.5.7
Affected: >= 1.6.0-rc.0, < 1.6.2 |
|
| Red Hat | Red Hat Connectivity Link 1 |
cpe:/a:redhat:connectivity_link:1
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-22771",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-01-12T18:49:10.805589Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-01-12T18:49:19.868Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:connectivity_link:1"
],
"defaultStatus": "unaffected",
"packageName": "rhcl-1/rhcl-operator-bundle",
"product": "Red Hat Connectivity Link 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:connectivity_link:1"
],
"defaultStatus": "unaffected",
"packageName": "rhcl-1/rhcl-rhel9-operator",
"product": "Red Hat Connectivity Link 1",
"vendor": "Red Hat"
}
],
"datePublic": "2026-01-12T18:08:22.532Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in Envoy Gateway. EnvoyExtensionPolicy Lua scripts, when executed by the Envoy proxy, can be exploited to leak the proxy\u0027s credentials. An attacker can then use these credentials to communicate with the control plane and gain unauthorized access to all secrets managed by the Envoy proxy, including sensitive TLS private keys. This vulnerability leads to critical information disclosure, potentially compromising the security of communications."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-15T01:19:24.781Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-22771"
},
{
"name": "RHBZ#2428735",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428735"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22771.json"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-01-12T19:01:29.001Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-01-12T18:08:22.532Z",
"value": "Made public."
}
],
"title": "envoyproxy/gateway: Envoy Gateway: Unauthorized access to secrets via Lua script credential leakage",
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"product": "gateway",
"vendor": "envoyproxy",
"versions": [
{
"status": "affected",
"version": "\u003c 1.5.7"
},
{
"status": "affected",
"version": "\u003e= 1.6.0-rc.0, \u003c 1.6.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.5.7 and 1.6.2, EnvoyExtensionPolicy Lua scripts executed by Envoy proxy can be used to leak the proxy\u0027s credentials. These credentials can then be used to communicate with the control plane and gain access to all secrets that are used by Envoy proxy, e.g. TLS private keys and credentials used for downstream and upstream communication. This vulnerability is fixed in 1.5.7 and 1.6.2."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-01-12T18:08:22.532Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-xrwg-mqj6-6m22",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-xrwg-mqj6-6m22"
}
],
"source": {
"advisory": "GHSA-xrwg-mqj6-6m22",
"discovery": "UNKNOWN"
},
"title": "Envoy Extension Policy lua scripts injection causes arbitrary command execution"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-22771",
"datePublished": "2026-01-12T18:08:22.532Z",
"dateReserved": "2026-01-09T18:27:19.387Z",
"dateUpdated": "2026-07-15T01:19:24.781Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-25294 (GCVE-0-2025-25294)
Vulnerability from cvelistv5 – Published: 2025-03-06 18:46 – Updated: 2025-03-06 20:34
VLAI
EPSS
VEX
Title
Envoy Gateway Log Injection Vulnerability
Summary
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. In all Envoy Gateway versions prior to 1.2.7 and 1.3.1 a default Envoy Proxy access log configuration is used. This format is vulnerable to log injection attacks. If the attacker uses a specially crafted user-agent which performs json injection, then he could add and overwrite fields to the access log. This vulnerability is fixed in 1.3.1 and 1.2.7. One can overwrite the old text based default format with JSON formatter by modifying the "EnvoyProxy.spec.telemetry.accessLog" setting.
Severity
5.3 (Medium)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-03-06 20:33 UTC
CWE
- CWE-117 - Improper Output Neutralization for Logs
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://github.com/envoyproxy/gateway/security/ad… | x_refsource_CONFIRM |
| https://github.com/envoyproxy/gateway/commit/8f48… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| envoyproxy | gateway |
Affected:
>= 1.3.0-rc.1, < 1.3.1
Affected: < 1.2.7 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-25294",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-03-06T20:33:40.307756Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-03-06T20:34:27.649Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "gateway",
"vendor": "envoyproxy",
"versions": [
{
"status": "affected",
"version": "\u003e= 1.3.0-rc.1, \u003c 1.3.1"
},
{
"status": "affected",
"version": "\u003c 1.2.7"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. In all Envoy Gateway versions prior to 1.2.7 and 1.3.1 a default Envoy Proxy access log configuration is used. This format is vulnerable to log injection attacks. If the attacker uses a specially crafted user-agent which performs json injection, then he could add and overwrite fields to the access log. This vulnerability is fixed in 1.3.1 and 1.2.7. One can overwrite the old text based default format with JSON formatter by modifying the \"EnvoyProxy.spec.telemetry.accessLog\" setting."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-117",
"description": "CWE-117: Improper Output Neutralization for Logs",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-03-06T18:46:23.913Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-mf24-chxh-hmvj",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-mf24-chxh-hmvj"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/8f48f5199cf1bbb9a8ac0695c5171bfef6c9198a",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/8f48f5199cf1bbb9a8ac0695c5171bfef6c9198a"
}
],
"source": {
"advisory": "GHSA-mf24-chxh-hmvj",
"discovery": "UNKNOWN"
},
"title": "Envoy Gateway Log Injection Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2025-25294",
"datePublished": "2025-03-06T18:46:23.913Z",
"dateReserved": "2025-02-06T17:13:33.122Z",
"dateUpdated": "2025-03-06T20:34:27.649Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2025-24030 (GCVE-0-2025-24030)
Vulnerability from cvelistv5 – Published: 2025-01-23 03:20 – Updated: 2025-01-23 14:58
VLAI
EPSS
VEX
Title
Envoy Admin Interface Exposed through prometheus metrics endpoint
Summary
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. A user with access to the Kubernetes cluster can use a path traversal attack to execute Envoy Admin interface commands on proxies managed by any version of Envoy Gateway prior to 1.2.6. The admin interface can be used to terminate the Envoy process and extract the Envoy configuration (possibly containing confidential data). Version 1.2.6 fixes the issue. As a workaround, the `EnvoyProxy` API can be used to apply a bootstrap config patch that restricts access strictly to the prometheus stats endpoint. Find below an example of such a bootstrap patch.
Severity
7.1 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-01-23 14:58 UTC
CWE
- CWE-419 - Unprotected Primary Channel
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/envoyproxy/gateway/security/ad… | x_refsource_CONFIRM |
| https://github.com/envoyproxy/gateway/commit/3eb3… | x_refsource_MISC |
| https://www.envoyproxy.io/docs/envoy/latest/confi… | x_refsource_MISC |
| https://www.envoyproxy.io/docs/envoy/latest/opera… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| envoyproxy | gateway |
Affected:
< 1.2.6
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-24030",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-01-23T14:58:52.009540Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-01-23T14:58:59.485Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "gateway",
"vendor": "envoyproxy",
"versions": [
{
"status": "affected",
"version": "\u003c 1.2.6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. A user with access to the Kubernetes cluster can use a path traversal attack to execute Envoy Admin interface commands on proxies managed by any version of Envoy Gateway prior to 1.2.6. The admin interface can be used to terminate the Envoy process and extract the Envoy configuration (possibly containing confidential data). Version 1.2.6 fixes the issue. As a workaround, the `EnvoyProxy` API can be used to apply a bootstrap config patch that restricts access strictly to the prometheus stats endpoint. Find below an example of such a bootstrap patch."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-419",
"description": "CWE-419: Unprotected Primary Channel",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-01-23T03:20:27.802Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-j777-63hf-hx76",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/envoyproxy/gateway/security/advisories/GHSA-j777-63hf-hx76"
},
{
"name": "https://github.com/envoyproxy/gateway/commit/3eb3301ab3dbf12b201b47bdb6074d1233be07bd",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/envoyproxy/gateway/commit/3eb3301ab3dbf12b201b47bdb6074d1233be07bd"
},
{
"name": "https://www.envoyproxy.io/docs/envoy/latest/configuration/best_practices/edge",
"tags": [
"x_refsource_MISC"
],
"url": "https://www.envoyproxy.io/docs/envoy/latest/configuration/best_practices/edge"
},
{
"name": "https://www.envoyproxy.io/docs/envoy/latest/operations/admin",
"tags": [
"x_refsource_MISC"
],
"url": "https://www.envoyproxy.io/docs/envoy/latest/operations/admin"
}
],
"source": {
"advisory": "GHSA-j777-63hf-hx76",
"discovery": "UNKNOWN"
},
"title": "Envoy Admin Interface Exposed through prometheus metrics endpoint"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2025-24030",
"datePublished": "2025-01-23T03:20:27.802Z",
"dateReserved": "2025-01-16T17:31:06.460Z",
"dateUpdated": "2025-01-23T14:58:59.485Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}