CVE-2026-73512

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's HttpDatagramHandler caches the current RequestDecoder when Capsule Protocol is enabled. Stream recreation, including an internal redirect, replaces the...

CVE-2026-73512

CVE-2026-73512 is a use-after-free in Envoy Proxy 's HttpDatagramHandler (QUIC/HTTP3 datagram handling). When Capsule Protocol is enabled, the handler caches the current RequestDecoder pointer. During stream recreation—such as an internal redirect —the ActiveStream is replaced and EnvoyQuicServer...