CVE-2026-31838

A flaw was found in Istio. This vulnerability in Envoy's Role-Based Access Control RBAC header matching could allow an attacker to bypass authorization policies. By crafting requests with multiple header values, an attacker could cause Envoy to misinterpret the header, leading to unauthorized...