AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-25294

MEDIUM · CVSS 5.3 EPSS 0.28% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-03-06 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.3. It affects Kubernetes. Public exploit code or proof-of-concept references have been detected in its references.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2025-25294
Severity
MEDIUM
CVSS
5.3
EPSS
0.28%
Kubernetes

Original NVD Description

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. In all Envoy Gateway versions prior to 1.2.7 and 1.3.1 a default Envoy Proxy access log configuration is used. This format is vulnerable to log injection attacks. If the attacker uses a specially crafted user-agent which performs json injection, then he could add and overwrite fields to the access log. This vulnerability is fixed in 1.3.1 and 1.2.7. One can overwrite the old text based default format with JSON formatter by modifying the "EnvoyProxy.spec.telemetry.accessLog" setting.

Related CVEs

Other vulnerabilities affecting the same vendor(s)