HIGH🇵🇱 Wersja polska

CVE-2026-22771

CVSS 8.8v3.1pub. 2026-01-12upd. 2026-06-30

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.5.7 and 1.6.2, EnvoyExtensionPolicy Lua scripts executed by Envoy proxy can be used to leak the proxy's credentials. These credentials can then be used to communicate with the control plane and gain access to all secrets that are used by Envoy proxy, e.g. TLS private keys and credentials used for downstream and upstream communication. This vulnerability is fixed in 1.5.7 and 1.6.2.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Envoyproxy Gateway

    APP
    Envoyproxy
    < 1.5.71.6.0 – 1.6.2 (excl.)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Container
CWE
References

Related vulnerabilities

CVE-2025-24030HIGH7.1same product

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based applicati...

CVE-2025-25294MEDIUM5.3same product

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based applicati...

CVE-2022-29226CRITICAL10.0PL ✓same vendor

Envoy OAuth filter: pominięcie walidacji access tokena umożliwia nieautoryzowany dostęp

CVE-2019-18801CRITICAL9.8PL ✓same vendor

Envoy 1.12.0: zapis poza buforami żądania HTTP/2 prowadzący do RCE lub bypass ACL

CVE-2019-18802CRITICAL9.8PL ✓same vendor

Bypass mechanizmów kontroli dostępu przez białe znaki w nagłówkach HTTP w Envoy