Cilium vulnerabilities

Products

• Cilium 36

Newest

• cilium tetragon Tetragon: Unauthenticated Tetragon gRPC admin API accessible from hostNetwork pods CVE-2026-65960 8.8 HighNovember 6, 2026
• cilium Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match CVE-2026-56743 Fix available 5.4 MediumJuly 15, 2026
• cilium Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces CVE-2026-56742 Fix available 5.9 MediumJuly 15, 2026
• cilium CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation CVE-2026-53935 Fix available 6.9 MediumJuly 6, 2026
• cilium Cilium: Sensitive information disclosure and cluster disruption via local Envoy admin socket access CVE-2026-49445 Fix available 9.2 CriticalJuly 6, 2026
• cilium ebpf cilium ebpf LoadCollectionSpec/LoadCollectionSpecFromReader btf.go loadRawSpec integer overflow CVE-2026-10722 Fix available 4.8 MediumJune 3, 2026
• cilium Cillium exposes sensitive information included in the cilium-bugtool debug archive CVE-2026-41520 Fix available 7.9 HighApril 25, 2026
• cilium Cilium L7 proxy may bypass Kubernetes NetworkPolicy for same-node traffic CVE-2026-33726 Fix available 5.4 MediumMarch 26, 2026
• cilium Cilium may not enforce host firewall policies when Native Routing, WireGuard and Node Encryption are enabled CVE-2026-26963 Fix available 6.1 MediumFebruary 19, 2026
• cilium Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic CVE-2025-64715 Fix available 4.0 MediumNovember 29, 2025
• cilium hubble Hubble CLI vulnerable to character injection CVE-2025-48056 Fix available 5.3 MediumMay 20, 2025
• cilium Cilium packets from terminating endpoints may not be encrypted in Wireguard-enabled clusters CVE-2025-32793 Fix available 4.0 MediumApril 21, 2025
• cilium Node based network policies may incorrectly allow workload traffic CVE-2025-30163 Fix available 3.4 LowMarch 24, 2025
• cilium East-west traffic not subject to egress policy enforcement for requests via Gateway API load balancers CVE-2025-30162 Fix available 3.2 LowMarch 24, 2025
• cilium Cilium vulnerable to information leakage via insecure default Hubble UI CORS header CVE-2025-23047 Fix available 6.5 MediumJanuary 22, 2025
• cilium DoS in Cilium agent DNS proxy from crafted DNS responses CVE-2025-23028 Fix available 5.3 MediumJanuary 22, 2025
• cilium Layer 7 policy enforcement may not occur in policies with wildcarded port ranges in Cilium CVE-2024-52529 Fix available 5.8 MediumNovember 25, 2024
• cilium CIDR deny policies may not take effect when a more narrow CIDR allow is present CVE-2024-47825 Fix available 4.0 MediumOctober 21, 2024
• cilium Cilium vulnerable to information leakage via incorrect ReferenceGrant update logic in Gateway API CVE-2024-42486 Fix available 5.4 MediumAugust 16, 2024
• cilium Cilium agent's race condition may lead to policy bypass for Host Firewall policy CVE-2024-42488 Fix available 6.8 MediumAugust 15, 2024
• cilium Cilium's Gateway API route matching order contradicts specification CVE-2024-42487 Fix available 4.0 MediumAugust 15, 2024
• cilium Cilium leaks sensitive information in cilium-bugtool CVE-2024-37307 Fix available 7.9 HighJune 13, 2024
• cilium Insecure IPsec transport encryption in Cilium CVE-2024-28860 Fix available 8.0 HighMarch 27, 2024
• cilium Cilium has possible unencrypted traffic between nodes when using WireGuard and L7 policies CVE-2024-28250 Fix available 6.1 MediumMarch 18, 2024
• cilium Cilium has possible unencrypted traffic between nodes when using IPsec and L7 policies CVE-2024-28249 Fix available 6.1 MediumMarch 18, 2024
• cilium Cilium intermittent HTTP policy bypass CVE-2024-28248 Fix available 7.2 HighMarch 18, 2024
• cilium Unencrypted traffic between pods when using Wireguard and an external kvstore CVE-2024-25631 Fix available 6.1 MediumFebruary 20, 2024
• cilium Cilium has unencrypted ingress/health traffic when using Wireguard transparent encryption CVE-2024-25630 Fix available 6.1 MediumFebruary 20, 2024
• cilium Denial of service via Kubernetes annotations in specific Cilium configurations CVE-2023-41332 Fix available 3.5 LowSeptember 26, 2023
• cilium Bypass of namespace restrictions in CiliumNetworkPolicy CVE-2023-41333 Fix available 6.9 MediumSeptember 26, 2023
• cilium Cilium NetworkPolicy bypass via pod labels CVE-2023-39347 Fix available 7.6 HighSeptember 26, 2023
• cilium Cilium vulnerable to information leakage via incorrect ReferenceGrant handling CVE-2023-34242 Fix available 3.4 LowJune 15, 2023
• cilium Potential HTTP policy bypass when using header rules in Cilium CVE-2023-30851 Fix available 2.6 LowMay 22, 2023
• cilium Debug mode leaks confidential data in Cilium CVE-2023-29002 Fix available 7.2 HighApril 18, 2023
• cilium cilium-cli `cilium-cli` disables etcd authorization for clustermesh clusters CVE-2023-28114 Fix available 4.8 MediumMarch 21, 2023
• cilium Cilium eBPF filters may be temporarily removed during agent restart CVE-2023-27595 Fix available 6.5 MediumMarch 17, 2023
• cilium Cilium vulnerable to potential network policy bypass when routing IPv6 traffic CVE-2023-27594 Fix available 4.2 MediumMarch 17, 2023
• cilium cilium-agent container can access the host via `hostPath` mount CVE-2023-27593 Fix available 4.4 MediumMarch 17, 2023
• cilium Improper Privilege Management in Cilium CVE-2022-29179 Fix available 7.5 HighMay 20, 2022
• cilium Incorrect Default Permissions in Cilium CVE-2022-29178 Fix available 8.8 HighMay 20, 2022