Skip to contentTigera Calico Enterprise vulnerabilities
- tigera calico, calico cloud, calico enterprise +2 moreL7 policy bypass via unnormalized HTTP path matchingCVE-2026-65407.9 High
- tigera calico, calico cloud, calico enterprise +2 moreCalico Tier Authorization Bypass via DeleteCollectionCVE-2026-411876.2 Medium
- tigera calico, calico cloud, calico enterprise +2 moreUnauthenticated Go pprof exposure in Calico debug serverCVE-2026-411866.0 Medium
- tigera calico, calico cloud, calico enterprise +2 moreCalicoctl leaks cluster credentials to stderr when verbose logging is enabledCVE-2026-6720Fix available7.2 High
- tigera calico, calico cloud, calico enterprise +2 moreServiceAccount token disclosure via Azure IPAM CNI plugin logsCVE-2026-41185Fix available6.0 Medium
- tigera calico, calico cloud, calico enterprise +2 morePrivilege escalation in Calico CNI install binaryCVE-2024-33522Fix available6.7 Medium
- project calico calico, tigera calico enterprise +1 moreCalico and Calico Enterprise may be vulnerable to route hijacking with the floating IP featureCVE-2022-28224Fix available5.5 Medium
- projectcalico calico, tigera calico enterprise +1 moreCalico nodes IPv6 traffic redirection from route advertismentCVE-2020-13597Fix available6.0 Medium