cve.bz

CVE-2025-66220

7.1 highEPSS 0.2%

High (7.1) in envoyproxy envoy. EPSS 0.2% chance of exploitation in the next 30 days. Fixed in github.com/envoyproxy/envoy 1.33.13, 1.34.11, 1.35.7.

Envoy is a high-performance edge/middle/service proxy. In 1.33.12, 1.34.10, 1.35.6, 1.36.2, and earlier, Envoy’s mTLS certificate matcher for match_typed_subject_alt_names may incorrectly treat certificates containing an embedded null byte (\0) inside an OTHERNAME SAN value as valid matches.

Severity

CVSS 3.1

7.1 high
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
EPSS
0.2% chance of exploitation in the next 30 days; higher than 6% of CVEs (scores of 2026-10-31)
CWE
CWE-170
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-rwjg-c3h2-f57pGogithub.com/envoyproxy/envoy>=1.36.0 <1.36.31.36.3
GHSA-rwjg-c3h2-f57pGogithub.com/envoyproxy/envoy>=1.35.0 <1.35.71.35.7
GHSA-rwjg-c3h2-f57pGogithub.com/envoyproxy/envoy>=1.34.0 <1.34.111.34.11
GHSA-rwjg-c3h2-f57pGogithub.com/envoyproxy/envoy<1.33.131.33.13

References

Check your stackJSON