CVE-2021-34824: Istio

High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days.

Istio (1.8.x, 1.9.0-1.9.5 and 1.10.0-1.10.1) contains a remotely exploitable vulnerability where credentials specified in the Gateway and DestinationRule credentialName field can be accessed from different namespaces.

Affected products

• Istio Istio: from 1.8.0, before 1.9.6 (fixed in 1.9.6); from 1.10.0, before 1.10.2 (fixed in 1.10.2)

Published 2021-06-29. Last modified 2026-06-17.