Database/Container, Kubernetes & orchestration
Istio: A RequestAuthentication jwksUri pointed at an internal service makes istiod issue an unauthenticated request
CVE-2026-41413Container, Kubernetes & orchestrationcurated
Impact
A RequestAuthentication jwksUri pointed at an internal service makes istiod issue an unauthenticated request; SSRF from the control plane
Who can reach it
Cluster user with namespace access
What to do
Rolling istiod upgrade to 1.28.6/1.29.2+
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.