zh/news/security/istio-security-2021-006/ data-category=security-bulletins><div class=post-date><p>May 11, 2021</p></div><div><h4 class=post-title>ISTIO-SECURITY-2021-006</h4><div class=post-summary><p>当网关配置了 AUTO_PASSTHROUGH 路由配置时，外部客户端可以绕过授权检查访问集群中的意外服务。</p><div><strong>CVE(s)</strong>: CVE-2021-31921</div><div><strong>CVSS</strong>: 10</div><strong>Affected versions</strong>: All releases prior to 1.8.6 , 1.9.0 to 1.9.4</div><p class