BIT-CILIUM-2025-64715 Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...

The vulnerability of the Containerd execution environment, related to lack of access control, allows a intruder to gain unauthorized access to protected information or execute arbitrary code.

The vulnerability of the Containerd runtime is related to a deficiency where additional groups are not properly configured within the container. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or execute arbitrary code...