Cilium L7 proxy may bypass Kubernetes NetworkPolicy for same-node traffic in github.com/cilium/cilium
Cilium L7 proxy may bypass Kubernetes NetworkPolicy for same-node traffic in github.com/cilium/cilium
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-33726US | medium4.3OT elevated | — | ||
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.17.14, 1.18.8, and 1.19.2, Ingress Network Policies are not enforced… | ||||
02
references
External citations — patches, advisories, analysis.
- https://docs.cilium.io/en/stable/network/concepts/routing/#routingWEB
- https://docs.cilium.io/en/stable/network/kubernetes/policy/#network-policyWEB
- https://docs.cilium.io/en/stable/network/servicemesh/l7-traffic-managementWEB
- https://docs.cilium.io/en/stable/operations/performance/tuning/#ebpf-host-routingWEB
- https://github.com/cilium/cilium/pull/44693FIX
- https://github.com/cilium/cilium/security/advisories/GHSA-hxv8-4j4r-cqgvADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan