Cloud Service Mesh Releases Security Updates
Managed Cloud Service Mesh has released new sidecar versions for its rapid, regular, and stable channels, addressing a security vulnerability CVE-2026-035. These updates are rolling out progressively. The security proxy for Gateway API on GKE is also being updated across all managed release channels.
Security (2) ›
- Cloud Service Mesh
The following images are now rolling out for managed Cloud Service Mesh: Sidecar version 1.21.6-asm.36, is rolling out to the rapid release channel. Sidecar version 1.20.8-asm.86 is rolling out to the regular release channel. Sidecar version 1.19.10-asm.76 is rolling out to the stable release channel. These rollouts will preempt those previously announced on June 3, 2026 . These patch releases contain the fix for the vulnerability listed in GCP-2026-035
- Cloud Service Mesh
Proxy version csm_mesh_proxy.20260423_RC03 for Gateway API on GKE clusters is rolling out to all Managed Cloud Service Mesh release channels over the next week.
https://docs.cloud.google.com/release-notes#June_12_2026