Cilium may not enforce host firewall policies when Native Routing, WireGuard and Node Encryption are enabled
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.18.0 through 1.18.5 will incorrectly permit traffic from Pods on other nodes when Native Routing, WireGuard and Node Encryption are enabled. This issue has been fixed in version 1.18.6.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-26963US | medium5.4OT elevated | — | ||
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.18.0 through 1.18.5 will incorrectly permit traffic from Pods on other nodes w… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/cilium/cilium/commit/88e28e1e62c0b1a02c3f0fc22d888ac9eefbe885FIX
- https://github.com/cilium/cilium/pull/42892REPORT
- https://github.com/cilium/cilium/releases/tag/v1.18.6ARTICLE
- https://github.com/cilium/cilium/security/advisories/GHSA-5r23-prx4-mqg3ADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2026-26963WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan