Skip to content
Sign in
6.5 Medium

CVE-2025-30157 Envoy is a cloud-native high-performance edge/middle/service proxy

Description

Envoy is a cloud-native high-performance edge/middle/service proxy. Prior to 1.33.1, 1.32.4, 1.31.6, and 1.30.10, Envoy's ext_proc HTTP filter is at risk of crashing if a local reply is sent to the external server due to the filter's life time issue. A known situation is the failure of a websocket handshake will trigger a local reply leading to the crash of Envoy. This vulnerability is fixed in 1.33.1, 1.32.4, 1.31.6, and 1.30.10.

Affected products and versions

Product Affected versions Fixed in
envoy 1.33 1.33.0 → < 1.33.1 1.33.1
envoy 1.32 1.32.0 → < 1.32.4 1.32.4
envoy 1.31 1.31.0 → < 1.31.6 1.31.6
envoy 1.30 earliest → < 1.30.10 1.30.10

Other CVEs of envoy

The 98 CVEs of envoy →
CVE-2026-73511 Envoy is an open source edge and service proxy designed for cloud-native applications 5.3 Medium CVE-2026-73553 Envoy is an open source edge and service proxy designed for cloud-native applications 7.5 High CVE-2026-73551 Envoy is an open source edge and service proxy designed for cloud-native applications 5.3 Medium CVE-2026-73546 Envoy is an open source edge and service proxy designed for cloud-native applications 7.4 High
Track this CVE