Nixpkgs security tracker
Untriaged
Permalink
CVE-2026-23766
4.1 MEDIUM
- CVSS version: 3.1
- Attack vector (AV): ADJACENT_NETWORK
- Attack complexity (AC): LOW
- Privileges required (PR): LOW
- User interaction (UI): NONE
- Scope (S): CHANGED
- Confidentiality impact (C): NONE
- Integrity impact (I): LOW
- Availability impact (A): NONE
Istio through 1.28.2 allows iptables rule injection for changing firewall …
Istio through 1.28.2 allows iptables rule injection for changing firewall behavior via the traffic.sidecar.istio.io/excludeInterfaces annotation. NOTE: the reporter's position is "this doesn't represent a security vulnerability (pod creators can already exclude sidecar injection entirely)."
Affected products
Istio
- =<1.28.2
Package maintainers
-
@ryan4yin Ryan Yin <xiaoyin_c@qq.com>
-
@bryanasdev000 Bryan Albuquerque <bryanasdev000@gmail.com>
-
@veehaitch Vincent Haupert <mail@vincent-haupert.de>