BIT-HUBBLE-RELAY-2026-56743 Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match

🗓️ 19 Jul 2026 23:41:16Reported by GoogleType

osv🔗 osv.dev👁 7 Views

Cilium can allow local namespace ingress with ipBlock policies when a custom cluster name is set; fixed in 1.19.5.

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2026-56743	15 Jul 202619:15	–	attackerkb
CVE	CVE-2026-56743	15 Jul 202619:15	–	cve
Cvelist	CVE-2026-56743 Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match	15 Jul 202619:15	–	cvelist
EUVD	EUVD-2026-44774	15 Jul 202619:15	–	euvd
NVD	CVE-2026-56743	15 Jul 202620:17	–	nvd
OSV	BIT-CILIUM-2026-56743 Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match	19 Jul 202623:37	–	osv
OSV	BIT-CILIUM-OPERATOR-2026-56743 Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match	19 Jul 202623:37	–	osv
OSV	CVE-2026-56743 Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match	15 Jul 202619:15	–	osv
OSV	MINI-F6C8-2XWG-JW76	18 Jul 202613:14	–	osv
OSV	MINI-XJ9F-Q2P4-55G5	18 Jul 202613:14	–	osv

Source	Link
github	www.github.com/cilium/cilium/commit/1c84ae3b58a7cd54f7ee355e6c524c82f620eae8
github	www.github.com/cilium/cilium/commit/bacea640404c0805c23515353dc1681c5bf35171
github	www.github.com/cilium/cilium/pull/46305
github	www.github.com/cilium/cilium/pull/46456
github	www.github.com/cilium/cilium/releases/tag/v1.19.5
github	www.github.com/cilium/cilium/security/advisories/GHSA-fm8w-2m5w-9j7r
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-56743

20 Jul 2026 08:41Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.15.4

EPSS0.00158

SSVC