high8.5
CVE-2026-15738
Incorrect behavior order in the Gateway API listener-rule generation in Amazon AWS Load Balancer Controller before 3.4.2 might allow an authenticated remote us…
Impact
Incorrect behavior order in the Gateway API listener-rule generation in Amazon AWS Load Balancer Controller before 3.4.2 might allow an authenticated remote user to intercept, spoof, or deny another namespace's gRPC traffic on a shared Gateway via a crafted HTTPRoute resource. To mitigate this issue, users should upgrade to version 3.4.2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amazon | Amazon AWS Load Balancer Controller | before 3.4.2 |
Versions were read from the advisory text. No structured product data has been published for this record yet.