NTG Gateway Fabric Vulnerability in gRPC Configuration by F5
CVE-2026-96615

7.1HIGH

Key Information:

Vendor

F5
Status
Nginx Gateway Fabric
Vendor
CVE Published:
14 October 2026

What is CVE-2026-96615?

A vulnerability exists in NGINX Gateway Fabric when configured alongside the Gateway Custom Resource Definition (CRD) and utilizing an authenticated gRPC connection with the NGINX Agent. Specifically, if a namespaced attacker accesses a service account, they can impersonate the authenticated gRPC connection. This exploitation allows the attacker to read TLS private keys from Gateway deployments situated in different namespaces, posing a significant security risk to the integrity of encrypted communications. It should be noted that this issue primarily affects the control plane and does not involve data plane exposure.

Affected Version(s)

NGINX Gateway Fabric 2.0.0 < 2.8.0

References

https://my.f5.com/manage/s/article/K000162610
vendor-advisory

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

F5 acknowledges Elias Hasas (GitHub: @zer0d4y5) for bringing this issue to our attention and following the highest standards of coordinated disclosure.
.