CVE-2026-53714

A flaw was found in Envoy Gateway. When operating in GatewayNamespaceMode, the xDS gRPC server fails to properly authenticate certain unary Fetch RPCs and State-of-the-World protocol messages. This oversight allows any pod with network access to port 18000 to retrieve sensitive information. An...