CVE-2026-53719

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-53719
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53719.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-53719
Aliases
Downstream
Related
Published
2026-09-14T20:13:20Z
Modified
2026-09-15T11:45:36Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization
Details

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, translateSecurityPolicyForRoute in internal/gatewayapi/securitypolicy.go dereferences a nil authorization value when a namespace-scoped tenant creates a SecurityPolicy targeting a TCPRoute and omits spec.authorization. The persistent object triggers the panic on every reconcile; recovery in message/watchutil.go keeps the process alive but unwinds the runner/runner.go handle callback, stalling controller-wide xDS and infrastructure intermediate-representation publishing until an administrator deletes the object. The data plane continues to serve the last known good configuration while publication is stalled. This issue is fixed in versions 1.7.4 and 1.8.1.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-476"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53719.json"
}
References

Affected packages

Git / github.com/envoyproxy/gateway

Affected ranges

Type
GIT
Repo
https://github.com/envoyproxy/gateway
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
062b176235b72d339fac340d23dd37679b36dca6
Introduced
2de2611fdbbca83d4a1ede99417c90fcdead24d9
Fixed
097ab899b9d041452d02f15d738514eda10ea21b
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.7.4"
        },
        {
            "introduced": "1.8.0-rc.0"
        },
        {
            "fixed": "1.8.1"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

Other
latest
v0.*
v0.1.0
v0.2.0
v0.2.0-rc1
v0.2.0-rc2
v0.5.0-rc.1
v1.*
v1.6.0-rc.0
v1.7.0
v1.7.0-rc.0
v1.7.0-rc.1
v1.7.0-rc.2
v1.7.1
v1.7.2
v1.7.3
v1.8.0
v1.8.0-rc.0
v1.8.0-rc.1
v1.9.0-rc.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53719.json"