CVE-2026-47775 | envoyproxy envoy up to 1.35.10/1.36.6/1.37.2/1.38.0 encrypt/decrypt information exposure (GHSA-396h-jpq4-vc7p)

A vulnerability labeled as problematic has been found in envoyproxy envoy up to 1.35.10/1.36.6/1.37.2/1.38.0. This impacts the function encrypt/decrypt. The manipulation results in information exposure through error message.

This vulnerability was named CVE-2026-47775. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More