PT-2025-48980 · Envoy · Envoy

Published 2025-12-03 · Updated 2025-12-06 · CVE-2025-66220

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Envoy versions 1.33.12 through 1.36.2

Description Envoy’s mTLS certificate matcher for match typed subject alt names may incorrectly treat certificates containing an embedded null byte (0) inside an OTHERNAME SAN value as valid matches. This can lead to unexpected behavior in mutual TLS authentication.

Recommendations Update to a version later than 1.36.2.

Exploit

Fix

Weakness Enumeration

CWE-170

Related Identifiers

BIT-ENVOY-2025-66220

CVE-2025-66220

GHSA-RWJG-C3H2-F57P

Affected Products

Envoy

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/66xxx/CVE-2025-66220.json · Exploit
• https://github.com/envoyproxy/envoy/security/advisories/GHSA-rwjg-c3h2-f57p · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-66220 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-66220 · Security Note
• https://osv.dev/vulnerability/BIT-envoy-2025-66220 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-rwjg-c3h2-f57p · Vendor Advisory
• https://github.com/envoyproxy/envoy · Note
• https://t.me/CVEtracker/38779 · Telegram Post
• https://twitter.com/CVEnew/status/1996291985838145566 · Twitter Post
• https://t.me/cveNotify/144894 · Telegram Post