xpected services in the cluster, bypassing authorization checks, when a gateway is configured with <code>AUTO_PASSTHROUGH</code> routing configuration. See the <a href=/v1.20/news/security/istio-security-2021-006/>ISTIO-SECURITY-2021-006 bulletin</a> for more details.<ul><li><strong>CVSS Score</strong>: 10.0 <a href="https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H">AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H</a></li></ul></li></ul><h2 id=changes>Changes</h2><ul><li><s