CVE-2026-15738 - Issue with AWS Load Balancer Controller Cross-Namespace Traffic Interception via HTTPRoute/GRPCRoute Priority Ordering

Update the AWS Load Balancer Controller to version 3.4.2 and apply necessary patches to forked or derivative code to resolve the CVE-2026-15738 vulnerability, ensuring that ALB listener rule priorities are correctly assigned based on route specificity rather than route kind.

Deploy the updated AWS Load Balancer Controller version 3.4.2 across your Kubernetes clusters to address the security vulnerability and ensure that ALB listener rules are correctly ordered, enhancing the security and reliability of your load balancing configurations.

Implement the upgrade to AWS Load Balancer Controller version 3.4.2 to mitigate the security risk of cross-namespace traffic interception due to incorrect rule precedence ordering, ensuring the integrity and security of your Kubernetes cluster traffic management.