7.1
High
CVE-2025-0752 A flaw was found in OpenShift Service Mesh 2.6.3 and 2.5.6
Description
A flaw was found in OpenShift Service Mesh 2.6.3 and 2.5.6. Rate-limiter avoidance, access-control bypass, CPU and memory exhaustion, and replay attacks may be possible due to improper HTTP header sanitization in Envoy.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenShift Service Mesh 2 | Versions not published |
References
- access.redhat.com access.redhat.com
- RHBZ#2339115 bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of OpenShift Service Mesh 2
The 45 CVEs of OpenShift Service Mesh 2 →
CVE-2026-47220
Envoy is an open source edge and service proxy designed for cloud-native applications
7.5
High
CVE-2026-27145
(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…
6.5
Medium
CVE-2024-52011
launch-editor allows users to open files with line numbers in editor from Node.js
7.5
High
CVE-2026-45736
ws is an open source WebSocket client and server for Node.js
4.4
Medium