Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Envoy Proxy Vulnerability - CVE-2025-30157 - Vulnerability Database
Envoy Proxy

Envoy Proxy Vulnerability - CVE-2025-30157

High
Reference: CVE-2025-30157
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2025-30157
Title: Envoy Proxy Vulnerability
Overview:

Envoy is a cloud-native high-performance edge/middle/service proxy. Prior to 1.33.1 1.32.4 1.31.6 and 1.30.10 Envoy39s ext_proc HTTP filter is at risk of crashing if a local reply is sent to the external server due to the filter39s life time issue. A known situation is the failure of a websocket handshake will trigger a local reply leading to the crash of Envoy. This vulnerability is fixed in 1.33.1 1.32.4 1.31.6 and 1.30.10.