io-security-2021-006/>ISTIO-SECURITY-2021-006</a></td><td>May 11, 2021</td><td>All releases prior to 1.8.6<br>1.9.0 to 1.9.4<br></td><td class=score><a href="https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV%3aN%2fAC%3aL%2fPR%3aN%2fUI%3aN%2fS%3aC%2fC%3aH%2fI%3aH%2fA%3aH&version=3.1">10</a></td><td>An external client can access unexpected services in the cluster, bypassing authorization checks, when a gateway is configured with AUTO_PASSTHROUGH routing configuration</td></tr><tr><td style=white-