CVE-2026-15970

A flaw was found in Consul. When a service proxy is configured with a custom public listener, an authenticated user within the mesh network can bypass Layer 7 L7 authorization intentions. This allows the user to access HTTP paths that should be blocked, potentially leading to unauthorized...