CVE-2025-25294

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. In all Envoy Gateway versions prior to 1.2.7 and 1.3.1 a default Envoy Proxy access log configuration is used. This format is vulnerable to log injection attacks. If the attacker uses a specially crafted user-agent which performs json injection, then he could add and overwrite fields to the access log. This vulnerability is fixed in 1.3.1 and 1.2.7. One can overwrite the old text based default format with JSON formatter by modifying the "EnvoyProxy.spec.telemetry.accessLog" setting.

• CWE-117

• https://github.com/envoyproxy/gateway/commit/8f48f5199cf1bbb9a8ac0695c5171bfef6c9198aPatch
• https://github.com/envoyproxy/gateway/security/advisories/GHSA-mf24-chxh-hmvjMitigation, Third Party Advisory

Published

Mar 6, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-25289@octokit/request-error is an error class for Octokit request…5.3
• CVE-2025-2529Applications using affected versions of Ehcache 3.x can expe…3.7
• CVE-2025-25290@octokit/request sends parameterized requests to GitHub’s AP…5.3
• CVE-2025-25291ruby-saml provides security assertion markup language (SAML)…9.8
• CVE-2025-25292ruby-saml provides security assertion markup language (SAML)…9.8
• CVE-2025-25293ruby-saml provides security assertion markup language (SAML)…7.5
• CVE-2025-25295Label Studio is an open source data labeling tool. A path tr…8.7
• CVE-2025-25296Label Studio is an open source data labeling tool. Prior to …6.1
• CVE-2025-25297Label Studio is an open source data labeling tool. Prior to …7.7
• CVE-2025-25298Strapi is an open source headless CMS. The @strapi/core pack…5.3
• CVE-2025-25299CKEditor 5 is a modern JavaScript rich-text editor with an M…2.3
• CVE-2025-2530Luxion KeyShot DAE File Parsing Access of Uninitialized Poin…7.8