CVE-2026-53935

Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, enabling hijacking traffic to Services in any namespa...

CVE-2026-53935 CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation

Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, enabling hijacking traffic to Services in any namespa...

EUVD-2026-42101

Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, enabling hijacking traffic to Services in any namespa...

CVE-2026-53935

Summary: CVE-2026-53935 affects Cilium versions prior to 1.17.16, 1.18.2–1.18.9, and 1.19.0–1.19.3. An attacker who can create a CiliumLocalRedirectPolicy may specify arbitrary ClusterIPs via addressMatcher, enabling cross-namespace traffic hijacking to Services and bypassing serviceMatcher names...

CVE-2026-53935

Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, enabling hijacking traffic to Services in any namespa...

GO-2026-5905 Cilium vulnerable to sensitive information disclosure and cluster disruption via local Envoy admin socket access in github.com/cilium/cilium

Cilium vulnerable to sensitive information disclosure and cluster disruption via local Envoy admin socket access in github.com/cilium/cilium...

GO-2026-5914 CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation in github.com/cilium/cilium

CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation in github.com/cilium/cilium...

GHSA-3FCV-JVFP-M4Q9 Cilium vulnerable to sensitive information disclosure and cluster disruption via local Envoy admin socket access

Impact When Cilium L7 functionality is enabled on a cluster, the Envoy instance supporting this functionality creates a world-accessible socket on cluster nodes. A local attacker would be able to access Envoy admin endpoints. Depending on deployment configuration, this can expose sensitive...

Cilium vulnerable to sensitive information disclosure and cluster disruption via local Envoy admin socket access

Impact When Cilium L7 functionality is enabled on a cluster, the Envoy instance supporting this functionality creates a world-accessible socket on cluster nodes. A local attacker would be able to access Envoy admin endpoints. Depending on deployment configuration, this can expose sensitive...

PT-2026-56051

Name of the Vulnerable Software and Affected Versions Cilium versions 1.19.0 through 1.19.1 Cilium versions 1.18.0 through 1.18.7 Cilium versions prior to 1.17.14 Description When L7 functionality is enabled, the Envoy instance creates a world-accessible socket on cluster nodes. A local attacker...

PT-2026-56056

Name of the Vulnerable Software and Affected Versions Cilium versions 1.19.0 through 1.19.3 Cilium versions 1.18.2 through 1.18.9 Cilium versions prior to 1.17.16 Description Users capable of creating CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs using the addressMatcher parameter...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: frankenphp-8.3, argo-workflows-fips, knative-serving, knative-eventing-fips, prometheus, opentofu-fips, kube-conformance, gitlab-rails-ce, flux-fips, kots, loki, omnictl-multiarch-fips, keda-fips, fscrypt, cilium, zarf, cloud-provider-aws, etcd-fips, kubescape,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: frankenphp-8.3, argo-workflows-fips, knative-serving, knative-eventing-fips, prometheus, opentofu-fips, kube-conformance, gitlab-rails-ce, flux-fips, kots, loki, omnictl-multiarch-fips, keda-fips, fscrypt, cilium, zarf, cloud-provider-aws, etcd-fips, kubescape,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: frankenphp-8.3, argo-workflows-fips, knative-serving, knative-eventing-fips, prometheus, opentofu-fips, kube-conformance, gitlab-rails-ce, kots, podman-fips, teleport-operator-fips, loki, omnictl-multiarch-fips, keda-fips, fscrypt, cilium, cloud-provider-aws,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: frankenphp-8.3, argo-workflows-fips, knative-serving, knative-eventing-fips, prometheus, opentofu-fips, kube-conformance, gitlab-rails-ce, kots, podman-fips, teleport-operator-fips, loki, omnictl-multiarch-fips, keda-fips, fscrypt, cilium, cloud-provider-aws,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: rancher-machine, gh, syft, buildkitd, opentelemetry-collector, teleport, aactl, knative-serving, pulumi-language-yaml, atlantis, fulcio, gomplate, pulumi-language-dotnet, podman, terraform-provider-azurerm, tflint, gptscript, falco-no-driver, apko, external-dns,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: external-secrets-operator, nerdctl, containerd, minio, prometheus-operator, mattermost, trivy-operator, opentelemetry-collector, flux, skaffold, aactl, cilium-cli, kine, rancher, zot, knative-serving, prometheus, istio, k3s, flux-image-automation-controller, kaf,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, nerdctl, containerd, minio, prometheus-operator, mattermost, trivy-operator, opentelemetry-collector, flux, skaffold, aactl, cilium-cli, kine, rancher, zot, knative-serving, prometheus, istio, k3s, flux-image-automation-controller, kaf,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: opentofu, external-secrets-operator, nerdctl, containerd, minio, syft, act, prometheus-operator, mattermost, terragrunt, opentelemetry-collector, trivy-operator, flux, skaffold, aactl, cilium-cli, kine, zarf, zot, dagger, knative-serving, prometheus,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: external-secrets-operator, nerdctl, containerd, minio, prometheus-operator, mattermost, opentelemetry-collector, flux, zot, cilium-cli, aactl, kine, rancher, knative-serving, prometheus, istio, podman, k3s, kaf, cilium, falco-no-driver, docker-cli-buildx, external-dn...