diff --git a/WORKSPACE b/WORKSPACE
index 6009d8ec2f..0505049067 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -22,10 +22,10 @@ load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
 # 1. Determine SHA256 `wget https://github.com/envoyproxy/envoy/archive/$COMMIT.tar.gz && sha256sum $COMMIT.tar.gz`
 # 2. Update .bazelversion, envoy.bazelrc and .bazelrc if needed.
 #
-# Commit date: 2025-10-14
-ENVOY_SHA = "372b6d2785b8f61cedbac1fe51759b744ec198c0"
+# Commit date: 2025-10-15
+ENVOY_SHA = "ac742c65b4bb01f993dae0672440c1a18e44a588"
 
-ENVOY_SHA256 = "1fb39dd6f9b90aafafecd3450d844ae193c61c870b2f53c9a469bd74ab04049b"
+ENVOY_SHA256 = "e2feb40ec6bedf6d20f208974099ae88dd18cec30aeffb7e2afd811fc9c5f3a9"
 
 ENVOY_ORG = "envoyproxy"
 
diff --git a/source/extensions/filters/http/istio_stats/istio_stats.cc b/source/extensions/filters/http/istio_stats/istio_stats.cc
index 5085047597..5f54944eb9 100644
--- a/source/extensions/filters/http/istio_stats/istio_stats.cc
+++ b/source/extensions/filters/http/istio_stats/istio_stats.cc
@@ -779,9 +779,9 @@ class IstioStatsFilter : public Http::PassThroughFilter,
   // AccessLog::Instance
   void log(const Formatter::HttpFormatterContext& log_context,
            const StreamInfo::StreamInfo& info) override {
-    const Http::RequestHeaderMap* request_headers = &log_context.requestHeaders();
-    const Http::ResponseHeaderMap* response_headers = &log_context.responseHeaders();
-    const Http::ResponseTrailerMap* response_trailers = &log_context.responseTrailers();
+    const Http::RequestHeaderMap* request_headers = log_context.requestHeaders().ptr();
+    const Http::ResponseHeaderMap* response_headers = log_context.responseHeaders().ptr();
+    const Http::ResponseTrailerMap* response_trailers = log_context.responseTrailers().ptr();
 
     reportHelper(true);
     if (is_grpc_) {