CVE-2026-84303

EUVD-2026-69419

01.09.2026, 19:17

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, the xDS RBAC HTTP filter in internal/xds/httpfilter/rbac/rbac.go does not lowercase header matcher names in normalizeHeaderMatcher even though incoming metadata keys are lowercase. A DENY policy using a mixed-case name such as X-Role or User-Agent therefore does not match and fails open, allowing requests that should be rejected. The same case mismatch permits :Scheme or Grpc-Status to evade gRFC A41 validation and prevents Host from being rewritten to :authority. This issue is fixed in version 1.83.1.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	UNKNOWN				---

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 22.35%

Debian Releases

Debian Product

Codename

golang-google-grpc

bookworm	postponed
forky	vulnerable
sid	vulnerable
trixie	no-dsa

Ubuntu Releases

Ubuntu Product

Codename

golang-google-grpc

bionic	needs-triage
focal	needs-triage
jammy	needs-triage
noble	needs-triage
resolute	needs-triage
xenial	needs-triage

google-guest-agent

bionic	needs-triage
focal	needs-triage
jammy	needs-triage
noble	needs-triage
resolute	needs-triage
xenial	needs-triage

grpc

bionic	needs-triage
focal	needs-triage
jammy	needs-triage
noble	needs-triage
resolute	needs-triage
xenial	needs-triage

openSUSE / SLES Releases

openSUSE Product

Release

amazon-cloudwatch-agent

suse enterprise sap 15 SP4	1.300072.0-150400.9.13.1 fixed
suse enterprise sap 15 SP5	1.300072.0-150400.9.13.1 fixed
suse enterprise sap 15 SP6	1.300072.0-150400.9.13.1 fixed
suse enterprise sap 15 SP7	1.300072.0-150400.9.13.1 fixed
suse enterprise server 15 SP4	1.300072.0-150400.9.13.1 fixed
suse enterprise server 15 SP5	1.300072.0-150400.9.13.1 fixed
suse enterprise server 15 SP6	1.300072.0-150400.9.13.1 fixed
suse enterprise server 15 SP7	1.300072.0-150400.9.13.1 fixed

apptainer

suse enterprise sap 15 SP6	1.5.3-150600.4.43.1 fixed
suse enterprise server 15 SP6	1.5.3-150600.4.43.1 fixed

apptainer-sle15_6

suse enterprise sap 15 SP6	1.5.3-150600.4.43.1 fixed
suse enterprise server 15 SP6	1.5.3-150600.4.43.1 fixed

azure-storage-azcopy

suse enterprise sap 15 SP4	10.32.8-150400.9.21.1 fixed
suse enterprise sap 15 SP5	10.32.8-150400.9.21.1 fixed
suse enterprise sap 15 SP6	10.32.8-150400.9.21.1 fixed
suse enterprise sap 15 SP7	10.32.8-150400.9.21.1 fixed
suse enterprise server 15 SP4	10.32.8-150400.9.21.1 fixed
suse enterprise server 15 SP5	10.32.8-150400.9.21.1 fixed
suse enterprise server 15 SP6	10.32.8-150400.9.21.1 fixed
suse enterprise server 15 SP7	10.32.8-150400.9.21.1 fixed

google-cloud-sap-agent

suse enterprise sap 15 SP4	3.15-150100.3.87.1 fixed
suse enterprise sap 15 SP5	3.15-150100.3.87.1 fixed
suse enterprise sap 15 SP6	3.15-150100.3.87.1 fixed
suse enterprise sap 15 SP7	3.15-150100.3.87.1 fixed
suse enterprise server 15 SP4	3.15-150100.3.87.1 fixed
suse enterprise server 15 SP5	3.15-150100.3.87.1 fixed
suse enterprise server 15 SP6	3.15-150100.3.87.1 fixed
suse enterprise server 15 SP7	3.15-150100.3.87.1 fixed

google-guest-agent

suse enterprise sap 15 SP4	20260903.01-150000.1.85.1 fixed
suse enterprise sap 15 SP5	20260903.01-150000.1.85.1 fixed
suse enterprise sap 15 SP6	20260903.01-150000.1.85.1 fixed
suse enterprise sap 15 SP7	20260903.01-150000.1.85.1 fixed
suse enterprise server 15 SP4	20260903.01-150000.1.85.1 fixed
suse enterprise server 15 SP5	20260903.01-150000.1.85.1 fixed
suse enterprise server 15 SP6	20260903.01-150000.1.85.1 fixed
suse enterprise server 15 SP7	20260903.01-150000.1.85.1 fixed

google-osconfig-agent

suse enterprise sap 15 SP4	20260911.00-150000.1.67.1 fixed
suse enterprise sap 15 SP5	20260911.00-150000.1.67.1 fixed
suse enterprise sap 15 SP6	20260911.00-150000.1.67.1 fixed
suse enterprise sap 15 SP7	20260911.00-150000.1.67.1 fixed
suse enterprise server 15 SP4	20260911.00-150000.1.67.1 fixed
suse enterprise server 15 SP5	20260911.00-150000.1.67.1 fixed
suse enterprise server 15 SP6	20260911.00-150000.1.67.1 fixed
suse enterprise server 15 SP7	20260911.00-150000.1.67.1 fixed

helm

suse enterprise sap 15 SP4	3.21.3-150000.1.96.1 fixed
suse enterprise sap 15 SP5	3.21.3-150000.1.96.1 fixed
suse enterprise sap 15 SP6	3.21.3-150000.1.96.1 fixed
suse enterprise sap 15 SP7	3.21.3-150000.1.96.1 fixed
suse enterprise server 15 SP4	3.21.3-150000.1.96.1 fixed
suse enterprise server 15 SP5	3.21.3-150000.1.96.1 fixed
suse enterprise server 15 SP6	3.21.3-150000.1.96.1 fixed
suse enterprise server 15 SP7	3.21.3-150000.1.96.1 fixed

helm-bash-completion

suse enterprise sap 15 SP4	3.21.3-150000.1.96.1 fixed
suse enterprise sap 15 SP5	3.21.3-150000.1.96.1 fixed
suse enterprise sap 15 SP6	3.21.3-150000.1.96.1 fixed
suse enterprise sap 15 SP7	3.21.3-150000.1.96.1 fixed
suse enterprise server 15 SP4	3.21.3-150000.1.96.1 fixed
suse enterprise server 15 SP5	3.21.3-150000.1.96.1 fixed
suse enterprise server 15 SP6	3.21.3-150000.1.96.1 fixed
suse enterprise server 15 SP7	3.21.3-150000.1.96.1 fixed

helm-zsh-completion

suse enterprise sap 15 SP4	3.21.3-150000.1.96.1 fixed
suse enterprise sap 15 SP5	3.21.3-150000.1.96.1 fixed
suse enterprise sap 15 SP6	3.21.3-150000.1.96.1 fixed
suse enterprise sap 15 SP7	3.21.3-150000.1.96.1 fixed
suse enterprise server 15 SP4	3.21.3-150000.1.96.1 fixed
suse enterprise server 15 SP5	3.21.3-150000.1.96.1 fixed
suse enterprise server 15 SP6	3.21.3-150000.1.96.1 fixed
suse enterprise server 15 SP7	3.21.3-150000.1.96.1 fixed

terraform-provider-aws

suse enterprise sap 15 SP4	3.11.0-150200.6.29.2 fixed
suse enterprise sap 15 SP5	3.11.0-150200.6.29.2 fixed
suse enterprise server 15 SP4	3.11.0-150200.6.29.2 fixed
suse enterprise server 15 SP5	3.11.0-150200.6.29.2 fixed

terraform-provider-azurerm

suse enterprise sap 15 SP4	2.32.0-150200.6.23.2 fixed
suse enterprise sap 15 SP5	2.32.0-150200.6.23.2 fixed
suse enterprise server 15 SP4	2.32.0-150200.6.23.2 fixed
suse enterprise server 15 SP5	2.32.0-150200.6.23.2 fixed

terraform-provider-external

suse enterprise sap 15 SP4	2.0.0-150200.6.23.2 fixed
suse enterprise sap 15 SP5	2.0.0-150200.6.23.2 fixed
suse enterprise server 15 SP4	2.0.0-150200.6.23.2 fixed
suse enterprise server 15 SP5	2.0.0-150200.6.23.2 fixed

terraform-provider-google

suse enterprise sap 15 SP4	3.43.0-150200.6.23.2 fixed
suse enterprise sap 15 SP5	3.43.0-150200.6.23.2 fixed
suse enterprise server 15 SP4	3.43.0-150200.6.23.2 fixed
suse enterprise server 15 SP5	3.43.0-150200.6.23.2 fixed

terraform-provider-helm

suse enterprise sap 15 SP4	2.9.0-150200.6.34.2 fixed
suse enterprise sap 15 SP5	2.9.0-150200.6.34.2 fixed
suse enterprise server 15 SP4	2.9.0-150200.6.34.2 fixed
suse enterprise server 15 SP5	2.9.0-150200.6.34.2 fixed

terraform-provider-kubernetes

suse enterprise sap 15 SP4	1.13.2-150200.6.23.2 fixed
suse enterprise sap 15 SP5	1.13.2-150200.6.23.2 fixed
suse enterprise server 15 SP4	1.13.2-150200.6.23.2 fixed
suse enterprise server 15 SP5	1.13.2-150200.6.23.2 fixed

terraform-provider-local

suse enterprise sap 15 SP4	2.0.0-150200.6.30.2 fixed
suse enterprise sap 15 SP5	2.0.0-150200.6.30.2 fixed
suse enterprise server 15 SP4	2.0.0-150200.6.30.2 fixed
suse enterprise server 15 SP5	2.0.0-150200.6.30.2 fixed

terraform-provider-null

suse enterprise sap 15 SP4	3.0.0-150200.6.32.2 fixed
suse enterprise sap 15 SP5	3.0.0-150200.6.32.2 fixed
suse enterprise server 15 SP4	3.0.0-150200.6.32.2 fixed
suse enterprise server 15 SP5	3.0.0-150200.6.32.2 fixed

terraform-provider-random

suse enterprise sap 15 SP4	3.0.0-150200.6.26.2 fixed
suse enterprise sap 15 SP5	3.0.0-150200.6.26.2 fixed
suse enterprise server 15 SP4	3.0.0-150200.6.26.2 fixed
suse enterprise server 15 SP5	3.0.0-150200.6.26.2 fixed

terraform-provider-susepubliccloud

suse enterprise sap 15 SP4	0.0.1-150100.3.26.1 fixed
suse enterprise sap 15 SP5	0.0.1-150100.3.26.1 fixed
suse enterprise server 15 SP4	0.0.1-150100.3.26.1 fixed
suse enterprise server 15 SP5	0.0.1-150100.3.26.1 fixed

terraform-provider-tls

suse enterprise sap 15 SP4	3.0.0-150200.5.26.2 fixed
suse enterprise sap 15 SP5	3.0.0-150200.5.26.2 fixed
suse enterprise server 15 SP4	3.0.0-150200.5.26.2 fixed
suse enterprise server 15 SP5	3.0.0-150200.5.26.2 fixed

Common Weakness Enumeration

CWE-178 - Improper Handling of Case Sensitivity
The software does not properly account for differences in case sensitivity when accessing or determining the properties of a resource, leading to inconsistent results.

References

https://github.com/grpc/grpc-go/commit/db9482836c298f234c896cf82ab68cafc78237f8

https://github.com/grpc/grpc-go/commit/ebba6f3f1b206e2b4dc4d1d5a96d18430302c2fe

https://github.com/grpc/grpc-go/pull/9332

https://github.com/grpc/grpc-go/pull/9335

https://github.com/grpc/grpc-go/releases/tag/v1.83.1

https://github.com/grpc/grpc-go/security/advisories/GHSA-qc2q-p7wx-3px3