Skip to content
OpenAdvisories

Product · envoyproxy

gateway

10 known vulnerabilities.

gateway at a glance

Last 12 months
8
Critical · all time
1
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 5 10 December 2025: 0 vulnerabilities Dec 2025 January 2026: 1 vulnerability February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 7 vulnerabilities, 1 critical Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202671
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202610
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202510
Feb 202500
Jan 202510
Dec 202400
All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • High 7.4
    CVE-2026-53714

    Envoy Gateway: xDS Control Plane Information Disclosure when Envoy Gateway operates in GatewayNamespaceMode

    Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, the xDS gRPC server in GatewayNamespaceMode, configured through provider.kubernetes.deploy.type=GatewayNamespac…

    envoyproxy gateway github.com/envoyproxy/gateway Go
  • Medium 6.5
    CVE-2026-53716

    Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit

    Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, getFileFromGZ in internal/wasm/httpfetcher.go calls io.ReadAll on a gzip.Reader without limiting decompressed o…

    envoyproxy gateway github.com/envoyproxy/gateway Go
  • Medium 5.3
    CVE-2026-53715

    Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock

    Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, HTTPServer.ServeHTTP in internal/wasm/httpserver.go reads the plain mappingPath2Cache map without synchronizati…

    envoyproxy gateway github.com/envoyproxy/gateway Go
  • Medium 6.5
    CVE-2026-53719

    Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization

    Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, translateSecurityPolicyForRoute in internal/gatewayapi/securitypolicy.go dereferences a nil authorization value…

    envoyproxy gateway github.com/envoyproxy/gateway Go
  • Medium 6.4
    CVE-2026-53718

    Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass

    Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, an HTTPRoute can use an extension-managed custom backendRef to reference a backend resource in another namespac…

    envoyproxy gateway github.com/envoyproxy/gateway Go
  • Critical 9.1
    CVE-2026-53713

    Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure

    Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, to_absolute_normalized_path in internal/gatewayapi/luavalidator/security.lua does not collapse redundant separa…

    envoyproxy gateway github.com/envoyproxy/gateway Go
  • Medium 6.5
    CVE-2026-53717

    Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header

    Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, internal/wasm/imagefetcher.go follows tenant-controlled EnvoyExtensionPolicy spec.wasm[].code.image.url values …

    envoyproxy gateway github.com/envoyproxy/gateway Go
  • High 8.8
    CVE-2026-22771

    Envoy Extension Policy lua scripts injection causes arbitrary command execution

    Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.5.7 and 1.6.2, EnvoyExtensionPolicy Lua scripts executed by Envoy proxy can be used to leak the proxy's credentials. These cre…

    envoyproxy gateway github.com/envoyproxy/gateway Go
  • Medium 5.3
    CVE-2025-25294

    Envoy Gateway Log Injection Vulnerability

    Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. In all Envoy Gateway versions prior to 1.2.7 and 1.3.1 a default Envoy Proxy access log configuration is used. This format is vulnerable …

    envoyproxy gateway github.com/envoyproxy/gateway Go
  • High 7.1
    CVE-2025-24030

    Envoy Admin Interface Exposed through prometheus metrics endpoint

    Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. A user with access to the Kubernetes cluster can use a path traversal attack to execute Envoy Admin interface commands on proxies managed…

    envoyproxy gateway github.com/envoyproxy/gateway Go