What’s Vulnerable › Products

envoyproxy gateway vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your envoyproxy gateway version is affected

Latest envoyproxy gateway vulnerabilities

• CVE-2026-53719 — Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization (CVSS 6.5)
• CVE-2026-53718 — Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass (CVSS 6.4)
• CVE-2026-53716 — Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit (CVSS 6.5)
• CVE-2026-53715 — Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock (CVSS 5.3)
• CVE-2026-53714 — Envoy Gateway: xDS Control Plane Information Disclosure when Envoy Gateway operates in GatewayNamespaceMode (CVSS 7.4)
• CVE-2026-53713 — Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure (CVSS 9.1)
• CVE-2026-53717 — Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header (CVSS 6.5)
• CVE-2026-22771 — Envoy Extension Policy lua scripts injection causes arbitrary command execution (CVSS 8.8)
• CVE-2025-25294 — Envoy Gateway Log Injection Vulnerability (CVSS 5.3)
• CVE-2025-24030 — Envoy Admin Interface Exposed through prometheus metrics endpoint (CVSS 7.1)