CVE-2026-47775
published 2026-06-26CVE-2026-47775: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, the OAuth2 HTTP filter's…
PriorityP338medium6.8CVSS 3.1
AVNACHPRNUIRSUCHIHAN
EPSS
0.22%
11.7th percentile
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, the OAuth2 HTTP filter's encrypt()/decrypt() functions use AES-256-CBC without an authentication tag (no HMAC, no AEAD). The /callback endpoint returns HTTP 302 on successful decryption and HTTP 401 on padding failure, creating a padding oracle. An attacker who obtains the encrypted CodeVerifier cookie can recover the plaintext PKCE code_verifier in ~6,200 requests (~100 seconds), then exchange it with a stolen authorization code to obtain the victim's access token. This vulnerability is fixed in 1.35.11, 1.36.7, 1.37.3, and 1.38.1.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| envoyproxy | envoy | < 1.35.11 | 1.35.11 |
| envoyproxy | envoy | — | — |
| envoyproxy | envoy | — | — |
| envoyproxy | envoy | — | — |
| envoyproxy | envoy | >= 1.35.0 < 1.35.11 | 1.35.11 |
| envoyproxy | envoy | >= 1.36.0 < 1.36.7 | 1.36.7 |
| envoyproxy | envoy | >= 1.37.0 < 1.37.3 | 1.37.3 |
| envoyproxy | envoy | >= 1.38.0 < 1.38.1 | 1.38.1 |
| traefik | traefik | >= 3.6.11 < 3.7.13 | 3.7.13 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Traefik: BasicAuth singleflight coalescing reintroduces an unauthenticated username-enumeration timing oracle
ghsa·2026-09-22
CVE-2026-88010 [MEDIUM] CWE-208 Traefik: BasicAuth singleflight coalescing reintroduces an unauthenticated username-enumeration timing oracle
Traefik: BasicAuth singleflight coalescing reintroduces an unauthenticated username-enumeration timing oracle
## Summary
Traefik's BasicAuth middleware coalesces concurrent credential checks through a `singleflight.Group` to avoid hashing the same password many times at once. Since v3.6.11 the deduplication key was built from the submitted password plus the stored secret, so it depended on server state: a non-existent username collapsed onto one shared key while each configured username produced its own. Under attacker-controlled concurrency, a probe request arriving inside a leader request's in-flight window is served the leader's fast coalesced result when the username does not exist, but computes its own hash (slow) when the username exists — reintroducing, only in the concurrent case
VulDB
envoyproxy envoy up to 1.35.10/1.36.6/1.37.2/1.38.0 encrypt/decrypt information exposure (GHSA-396h-jpq4-vc7p)
vuldb·2026-06-26·CVSS 6.8
CVE-2026-47775 [MEDIUM] envoyproxy envoy up to 1.35.10/1.36.6/1.37.2/1.38.0 encrypt/decrypt information exposure (GHSA-396h-jpq4-vc7p)
A vulnerability labeled as problematic has been found in envoyproxy envoy up to 1.35.10/1.36.6/1.37.2/1.38.0. This impacts the function encrypt/decrypt. The manipulation results in information exposure through error message.
This vulnerability was named CVE-2026-47775. The attack may be performed from remote. There is no available exploit.
The affected component should be upgraded.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-06-26
Published