Announcing Istio 1.26.7

Istio 1.26.7 patch release.

Dec 3, 2025

This release contains bug fixes to improve robustness. This release note describes what’s different between Istio 1.26.6 and 1.26.7.

This release implements the security updates described in our 3rd of December post, ISTIO-SECURITY-2025-001.

Things to know and prepare before upgrading.

Download and install this release.

Visit the documentation for this release.

Inspect the full set of source code changes.

Changes

Fixed a goroutine leak in multicluster where krt collections with data from remote clusters would stay in memory even after that cluster was removed. (Issue #57269)
Fixed an issue where Envoy Secret resources could get stuck in WARMING state when the same Kubernetes Secret is referenced from Istio Gateway objects using both secret-name and namespace/secret-name formats. (Issue #58146)