CVE-2026-53718

描述

### Impact Envoy Gateway accepts extension-managed custom backendRefs from an HTTPRoute to a backend resource in another namespace without requiring a matching Gateway API ReferenceGrant in the target namespace. This breaks the Gateway API cross-namespace consent model: the namespace that owns the referenced backend resource does not need to opt in with a ReferenceGrant before another namespace’s HTTPRoute can use that resource. ### Patches [1.7.4](https://github.com/envoyproxy/gateway/releases/tag/v1.7.4) [1.8.1](https://github.com/envoyproxy/gateway/releases/tag/v1.8.1)

如何修補 CVE-2026-53718

要修補 CVE-2026-53718,請將受影響套件升級到下列已修補版本。

• —升級至 1.8.1 或更新版本
• —升級至 1.7.4 或更新版本

CVE-2026-53718 正在被利用嗎?

目前沒有被利用訊號。CVE-2026-53718 既不在 CISA KEV 也沒有最新的 EPSS 分數。

受影響套件(2)

• >= 1.8.0-rc.0, < 1.8.1
• from 0, < 1.7.4, >= 1.8.0-rc.0, < 1.8.1

CVSS 分數

參考連結(2)

• PATCHgithub.com/envoyproxy/gateway
• WEBgithub.com/envoyproxy/gateway/security/advisories/GHSA-fcrp-7gc2-93g7