VendorsEnvoy Proxygatewayany version
Vulnerabilities

Envoy Proxy Gateway any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2026-22771
Envoy Extension Policy lua scripts injection causes arbitrary command execution
Published 2026-01-12 · Modified
8.8EPSS 0.006
CVE-2025-24030
Envoy Admin Interface Exposed through prometheus metrics endpoint
Published 2025-01-23 · Analyzed
7.1EPSS 0.004
CVE-2025-25294
Envoy Gateway Log Injection Vulnerability
Published 2025-03-06 · Analyzed
5.3EPSS 0.003