cilium vulnerabilities

CVEs per yearBy the year they were published

1. 20222
2. 202310
3. 202412
4. 20257
5. 20268

Newest CVEs

• CVE-2026-56743

  Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match

  cilium · cilium

  Medium5.4
• CVE-2026-56742

  Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces

  cilium · cilium

  Medium5.9
• CVE-2026-49445

  Cilium: Sensitive information disclosure and cluster disruption via local Envoy admin socket access

  cilium · cilium

  Critical9.2
• CVE-2026-53935

  CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation

  cilium · cilium

  Medium6.9
• CVE-2026-10722

  cilium ebpf LoadCollectionSpec/LoadCollectionSpecFromReader btf.go loadRawSpec integer overflow

  cilium · ebpf

  Medium4.8
• CVE-2026-41520

  Cillium exposes sensitive information included in the cilium-bugtool debug archive

  cilium · cilium

  High7.9
• CVE-2026-33726

  Cilium L7 proxy may bypass Kubernetes NetworkPolicy for same-node traffic

  cilium · cilium

  Medium5.4
• CVE-2026-26963

  Cilium may not enforce host firewall policies when Native Routing, WireGuard and Node Encryption are enabled

  cilium · cilium

  Medium6.1
• CVE-2025-64715

  Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic

  cilium · cilium

  Medium4.0
• CVE-2025-48056

  Hubble CLI vulnerable to character injection

  cilium · hubble

  Medium5.3