gRPC-Go: access vulnerability via HTTP/2 Path Pseudo-Header

A vulnerability has been discovered in gRPC-Go allowing attackers to bypass access restrictions by exploiting the HTTP/2 Path Pseudo-Header.

Published 24sem1 sourceImportant

≈ 19sSpeed

The fact

This flaw exposes gRPC servers to unauthorized read and write access to sensitive data.

Developers using gRPC-Go must urgently apply security patches.

Click the link to read an article on the topic:

Explore this topic

Auto-synthesis from 1 media source · identified on May 23, 2026