CVE-2026-53713

A flaw was found in Envoy Gateway. An authenticated attacker with permissions to submit Lua extension policies can bypass file path restrictions by submitting paths containing redundant slashes. This flaw allows the attacker to read arbitrary files from the gateway controller container, resulting...

Envoy 安全漏洞

Envoy is an open source distributed proxy server. A security vulnerability exists in Envoy. The vulnerability allows an attacker to bypass rule policies that use the extauthz extension. The biggest threats from this vulnerability are confidentiality, integrity, and system availability...