Vulnerability in Envoy Proxy affecting cloud-native applications
CVE-2026-73547
7.5HIGH
What is CVE-2026-73547?
The ext_authz filter in Envoy Proxy, used for cloud-native applications, has a vulnerability where it improperly assumes that a request includes a :path pseudoheader. In scenarios where a path-less CONNECT request is made, this leads to dereferencing a null pointer during query string parsing. This could result in an unauthenticated downstream client being able to crash the Envoy process if the filter and authorization response employ query-parameter mutation. To mitigate this issue, it is critical to upgrade to versions 1.36.10, 1.37.6, 1.38.4, or 1.39.1.
Affected Version(s)
envoy < 1.36.10 < 1.36.10
envoy >= 1.37.0, < 1.37.6 < 1.37.0, 1.37.6
envoy >= 1.38.0, < 1.38.4 < 1.38.0, 1.38.4