GCP-2026-067
Cybersecurity Classified by Officially
Published: 2026-10-12Description Description Severity Notes A Denial-of-Service (DoS) vulnerability was discovered in Envoy Proxy when an HTTP filter (such as ext_proc with route_cache_action: RETAIN) mutates the :path header after route selection on a route configured with prefix_rewrite. For instructions and more details, see the Cloud Service Mesh security bulletin. High envoyproxy/envoy#47841
This is an extract. The publication continues at the source.
Read the original at the source: https://docs.cloud.google.com/support/bulletins/index#gcp-2026-067
Officially imported this from Google’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.
This publication has changed since it was first published
11 versions recorded. The original is kept in full — nothing is overwritten.
- v11 imported change on current
- v10 imported change on
- v9 imported change on
- v8 imported change on
- v7 imported change on
- v6 imported change on
- v5 imported change on
- v4 imported change on
- v3 imported change on
- v2 imported change on
- v1 as first published on
Provenance
- Organization
- Google — imported from official source
- Official source
- https://cloud.google.com/feeds/google-cloud-security-bulletins.xml RSS
- Imported
- October 12, 2026 22:00
- Versions
- 11 recorded
- Identity
-
tag:google.com,2016:google-cloud-security-bulletins#gcp-2026-067