Security Policy Dereference Issue in Envoy Gateway by Envoy Project
CVE-2026-53719
6.5MEDIUM
What is CVE-2026-53719?
The Envoy Gateway suffered from an issue where the translateSecurityPolicyForRoute function inconsistently handled a nil authorization value. This occurred when a namespace-scoped tenant created a SecurityPolicy targeting a TCPRoute without specifying spec.authorization. As a result, the system would panic during reconciliation, impacting the reliable operation of the gateway's processes. Despite a recovery mechanism that kept the process alive, the resulting blockage in publishing essential configurations could severely disrupt service operations. This vulnerability has been addressed in versions 1.7.4 and 1.8.1.
Affected Version(s)
gateway < 1.7.4 < 1.7.4
gateway >= 1.8.0-rc.0, < 1.8.1 < 1.8.0-rc.0, 1.8.1