Database/Container, Kubernetes & orchestration
Istio: When JWKS resolution fails, istiod falls back to hardcoded defaults, weakening JWT validation
CVE-2026-31837Container, Kubernetes & orchestrationcurated
Impact
When JWKS resolution fails, istiod falls back to hardcoded defaults, weakening JWT validation
Who can reach it
Unauthenticated network, exploitable by first disrupting JWKS reachability
What to do
Rolling istiod upgrade to 1.29.1/1.28.5/1.27.8+
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.