https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T18:31:44.404455+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-233432 EUVD-2026-233432 2026-10-07T18:31:44.420231+00:00 EUVD-2026-233432 https://cve.radiocsirt.org/vuln/fkie_cve-2022-39388 fkie_cve-2022-39388 2026-10-07T18:31:44.420281+00:00

Istio is an open platform to connect, manage, and secure microservices. In versions on the 1.15.x branch prior to 1.15.3, a user can impersonate any workload identity within the service mesh if they have localhost access to the Istiod control plane. Version 1.15.3 contains a patch for this issue. There are no known workarounds.

 https://cve.radiocsirt.org/vuln/ghsa-6c6p-h79f-g6p4 GHSA-6c6p-h79f-g6p4 — Istio may allow identity impersonation if user has localhost access 2026-10-07T18:31:44.420334+00:00

Affected: Go: github.com/istio/istio

### Impact

User can impersonate any workload identity within the service mesh if they have localhost access to the Istiod control plane.

### Patches 1.15.3

### Workarounds No. If using 1.15.2 please upgrade to 1.15.3 or later.

### References None at this time.

### For more information If you have any questions or comments about this advisory, please email us at [istio-security-vulnerability-reports@googlegroups.com](mailto:istio-security-vulnerability-reports@googlegroups.com)

 https://cve.radiocsirt.org/vuln/gsd-2022-39388 gsd-2022-39388 2026-10-07T18:31:44.420409+00:00 gsd-2022-39388