Vulnerability GO-2026-5121
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
3 months ago
June 25, 2026 at 06:26 PM UTC
Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway
v0.1.0-rc1 - v0.6.0-rc1
v0.1.0-rc1 - v0.6.0-rc1
Summary
Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway
Details
Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
4 hours ago
agent-router: MCP session resume does not verify the embedded anti-hijacking subject; default Helm seed makes session IDs forgeable
v0.4.0-rc1 - v1.1.0 GHSA-953h-535j-jg2v
v0.4.0-rc1 - v1.1.0 GHSA-953h-535j-jg2v
Medium Risk
5 months ago
Envoy AI Proxy - MCP Message Smuggling Vulnerability
v0.1.0-rc1 - v0.6.0-rc1 GHSA-4gph-2hhr-5mwg
v0.1.0-rc1 - v0.6.0-rc1 GHSA-4gph-2hhr-5mwg
Impacted packages
Timeline
Published
3 months ago
June 25, 2026 at 06:26 PM UTC
Fixed (v0.6.0)
5 months ago
May 05, 2026 at 06:49 PM UTC
Last Modified
3 months ago
June 25, 2026 at 06:45 PM UTC