Cilium L7 proxy may bypass Kubernetes NetworkPolicy for same-node traffic in github.com/cilium/cilium
Cilium L7 proxy may bypass Kubernetes NetworkPolicy for same-node traffic in github.com/cilium/cilium
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-33726US | medium4.3OT erhöht | — | ||
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.17.14, 1.18.8, and 1.19.2, Ingress Network Policies are not enforced… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://docs.cilium.io/en/stable/network/concepts/routing/#routingWEB
- https://docs.cilium.io/en/stable/network/kubernetes/policy/#network-policyWEB
- https://docs.cilium.io/en/stable/network/servicemesh/l7-traffic-managementWEB
- https://docs.cilium.io/en/stable/operations/performance/tuning/#ebpf-host-routingWEB
- https://github.com/cilium/cilium/pull/44693FIX
- https://github.com/cilium/cilium/security/advisories/GHSA-hxv8-4j4r-cqgvADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan