CVE-2022-21701

Istio is an open platform to connect, manage, and secure microservices. In versions 1.12.0 and 1.12.1 Istio is vulnerable to a privilege escalation attack. Users who have `CREATE` permission for `gateways.gateway.networking.k8s.io` objects can escalate this privilege to create other resources that they may not have access to, such as `Pod`. This vulnerability impacts only an Alpha level feature, the Kubernetes Gateway API. This is not the same as the Istio Gateway type (gateways.networking.istio.io), which is not vulnerable. Users are advised to upgrade to resolve this issue. Users unable to upgrade should implement any of the following which will prevent this vulnerability: Remove the gateways.gateway.networking.k8s.io CustomResourceDefinition, set PILOT_ENABLE_GATEWAY_API_DEPLOYMENT_CONTROLLER=true environment variable in Istiod, or remove CREATE permissions for gateways.gateway.networking.k8s.io objects from untrusted users.

• CWE-863
• CWE-863

• https://github.com/istio/istio/security/advisories/GHSA-mq8f-9446-c28rThird Party Advisory
• https://istio.io/latest/news/releases/1.12.x/announcing-1.12.2/Mitigation, Release Notes, Vendor Advisory
• https://github.com/istio/istio/security/advisories/GHSA-mq8f-9446-c28rThird Party Advisory
• https://istio.io/latest/news/releases/1.12.x/announcing-1.12.2/Mitigation, Release Notes, Vendor Advisory

Published

Jan 19, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-21696OnionShare is an open source tool that lets you securely and…4.3
• CVE-2022-21697Jupyter Server Proxy is a Jupyter notebook server extension …7.1
• CVE-2022-21698client_golang is the instrumentation library for Go applicat…7.5
• CVE-2022-21699IPython (Interactive Python) is a command shell for interact…8.8
• CVE-2022-2170The Microsoft Advertising Universal Event Tracking (UET) Wor…4.8
• CVE-2022-21700Micronaut is a JVM-based, full stack Java framework designed…5.3
• CVE-2022-21702Grafana is an open-source platform for monitoring and observ…5.4
• CVE-2022-21703Grafana is an open-source platform for monitoring and observ…8.8
• CVE-2022-21704log4js-node is a port of log4js to node.js. In affected vers…5.5
• CVE-2022-21705Octobercms is a self-hosted CMS platform based on the Larave…7.2
• CVE-2022-21706Zulip is an open-source team collaboration tool with topic-b…9.8
• CVE-2022-21707wasmCloud Host Runtime is a server process that securely hos…8.1