SUSE CVE-2025-30163

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Node based network policies fromNodes and toNodes will incorrectly permit traffic to/from non-node endpoints that share the labels specified in fromNodes and toNodes sections of network policies. Node based...

Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass due to the misconfiguration in the fromNodes and toNodes fields. By exploiting the label mismatches, an attacker can bypass network policies and access unauthorized network endpoints. Note: This is only exploitable...

CVE-2025-30163 Node based network policies may incorrectly allow workload traffic

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Node based network policies fromNodes and toNodes will incorrectly permit traffic to/from non-node endpoints that share the labels specified in fromNodes and toNodes sections of network policies. Node based...

CVE-2025-30163

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Node based network policies "fromNodes" and "toNodes" will incorrectly permit traffic to/from non-node endpoints that share the labels specified in "fromNodes" and "toNodes" sections of network policies. No...

PT-2025-12673

Name of the Vulnerable Software and Affected Versions Cilium versions 1.16.0 through 1.16.7 Cilium versions 1.17.0 through 1.17.1 Description The issue affects Cilium, a networking, observability, and security solution with an eBPF-based dataplane. Node-based network policies, specifically those...

CVE-2025-30163: Incorrect Authorization

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Node based network policies fromNodes and toNodes will incorrectly permit traffic to/from non-node endpoints that share the labels specified in fromNodes and toNodes sections of network policies. Node based...