Description

Envoy is a high-performance edge/middle/service proxy. In 1.33.12, 1.34.10, 1.35.6, 1.36.2, and earlier, Envoy’s mTLS certificate matcher for match_typed_subject_alt_names may incorrectly treat certificates containing an embedded null byte (\0) inside an OTHERNAME SAN value as valid matches.

Remediation

References

CVE-2025-66220

Related Vulnerabilities

WordPress Plugin Debug Log Manager Security Bypass (2.2.1)

WordPress Plugin Smart Forms-when you need more than just a contact form Security Bypass (2.6.84)

phpMyFAQ Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2025-62519)

WordPress 4.1.x Arbitrary File Deletion Vulnerability (4.1 - 4.1.23)

WordPress Plugin WP Hide & Security Enhancer Arbitrary File Download (1.3.9.2)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-170 CVE-2025-66220