cilium

Products

Exploited and recent CVEs

• CVE-2026-56743 Medium 5.4 Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match 0.2%
• CVE-2026-56742 Medium 5.9 Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces 0.2%
• CVE-2026-49445 Critical 9.2 Cilium: Sensitive information disclosure and cluster disruption via local Envoy admin socket access 0.2%
• CVE-2026-53935 Medium 6.9 CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation 0.3%
• CVE-2026-10722 Low 3.3 cilium ebpf LoadCollectionSpec/LoadCollectionSpecFromReader btf.go loadRawSpec integer overflow 0.2%
• CVE-2026-41520 High 7.9 Cillium exposes sensitive information included in the cilium-bugtool debug archive <0.1%
• CVE-2026-33726 Medium 5.4 Cilium L7 proxy may bypass Kubernetes NetworkPolicy for same-node traffic 0.3%
• CVE-2026-26963 Medium 6.1 Cilium may not enforce host firewall policies when Native Routing, WireGuard and Node Encryption are enabled 0.1%
• CVE-2025-64715 Medium 4.0 Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic 0.2%
• CVE-2025-48056 Medium 5.3 Hubble CLI vulnerable to character injection 0.3%
• CVE-2025-32793 Medium 4.0 Cilium packets from terminating endpoints may not be encrypted in Wireguard-enabled clusters 0.1%
• CVE-2025-30163 Low 3.4 Node based network policies may incorrectly allow workload traffic 0.2%
• CVE-2025-30162 Low 3.2 East-west traffic not subject to egress policy enforcement for requests via Gateway API load balancers 0.2%
• CVE-2025-23047 Medium 6.5 Cilium vulnerable to information leakage via insecure default Hubble UI CORS header 0.5%
• CVE-2025-23028 Medium 5.3 DoS in Cilium agent DNS proxy from crafted DNS responses 0.5%
• CVE-2024-52529 Medium 5.8 Layer 7 policy enforcement may not occur in policies with wildcarded port ranges in Cilium 0.5%
• CVE-2024-47825 Medium 4.0 CIDR deny policies may not take effect when a more narrow CIDR allow is present 0.4%
• CVE-2024-42486 Medium 5.4 Cilium vulnerable to information leakage via incorrect ReferenceGrant update logic in Gateway API 0.6%
• CVE-2024-42488 Medium 6.8 Cilium agent's race condition may lead to policy bypass for Host Firewall policy 0.5%
• CVE-2024-42487 Medium 4.0 Cilium's Gateway API route matching order contradicts specification 0.5%
• CVE-2024-37307 High 7.9 Cilium leaks sensitive information in cilium-bugtool 0.2%
• CVE-2024-28860 High 8.0 Insecure IPsec transport encryption in Cilium 0.2%
• CVE-2024-28250 Medium 6.1 Cilium has possible unencrypted traffic between nodes when using WireGuard and L7 policies 0.2%
• CVE-2024-28249 Medium 6.1 Cilium has possible unencrypted traffic between nodes when using IPsec and L7 policies 0.3%
• CVE-2024-28248 High 7.2 Cilium intermittent HTTP policy bypass 0.6%
• CVE-2024-25631 Medium 6.1 Unencrypted traffic between pods when using Wireguard and an external kvstore 0.2%
• CVE-2024-25630 Medium 6.1 Cilium has unencrypted ingress/health traffic when using Wireguard transparent encryption 0.2%
• CVE-2023-41332 Low 3.5 Denial of service via Kubernetes annotations in specific Cilium configurations 0.5%
• CVE-2023-41333 Medium 6.9 Bypass of namespace restrictions in CiliumNetworkPolicy 0.5%
• CVE-2023-39347 High 7.6 Cilium NetworkPolicy bypass via pod labels 0.6%