Tigera Calico vulnerabilities

• tigera calico, calico cloud, calico enterprise +2 more L7 policy bypass via unnormalized HTTP path matching CVE-2026-6540 7.9 HighJuly 30, 2026
• tigera calico, calico cloud, calico enterprise +2 more Calico Tier Authorization Bypass via DeleteCollection CVE-2026-41187 6.2 MediumJuly 30, 2026
• tigera calico, calico cloud, calico enterprise +2 more Unauthenticated Go pprof exposure in Calico debug server CVE-2026-41186 6.0 MediumJuly 30, 2026
• tigera calico, calico cloud, calico enterprise +2 more Calicoctl leaks cluster credentials to stderr when verbose logging is enabled CVE-2026-6720 Fix available 7.2 HighMay 28, 2026
• tigera calico, calico cloud, calico enterprise +2 more ServiceAccount token disclosure via Azure IPAM CNI plugin logs CVE-2026-41185 Fix available 6.0 MediumMay 28, 2026
• tigera calico ServiceAccount token disclosure via install-cni container logs CVE-2026-41184 Fix available 6.0 MediumMay 28, 2026
• tigera calico, calico cloud, calico enterprise +2 more Privilege escalation in Calico CNI install binary CVE-2024-33522 Fix available 6.7 MediumApril 29, 2024
• calico typha, tigera calico, calico enterprise +2 more +4 more Calico Typha hangs during unclean TLS handshake CVE-2023-41378 Fix available 7.5 HighNovember 6, 2023
• project calico calico, tigera calico enterprise +1 more Calico and Calico Enterprise may be vulnerable to route hijacking with the floating IP feature CVE-2022-28224 Fix available 5.5 MediumJune 6, 2022
• projectcalico calico, tigera calico enterprise +1 more Calico nodes IPv6 traffic redirection from route advertisment CVE-2020-13597 Fix available 6.0 MediumJune 3, 2020