# cve.now: Cilium

The newest entries naming Cilium as an affected vendor (up to 200), of 40 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-65960](https://cve.now/CVE-2026-65960.md): Tetragon: Unauthenticated Tetragon gRPC admin API accessible from hostNetwork pods (CVSS 8.8)
- [CVE-2026-56743](https://cve.now/CVE-2026-56743.md): Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match (CVSS 5.4)
- [CVE-2026-56742](https://cve.now/CVE-2026-56742.md): Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces (CVSS 5.9)
- [CVE-2026-49445](https://cve.now/CVE-2026-49445.md): Cilium: Sensitive information disclosure and cluster disruption via local Envoy admin socket access (CVSS 9.2)
- [CVE-2026-53935](https://cve.now/CVE-2026-53935.md): CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation (CVSS 6.9)
- [CVE-2026-10722](https://cve.now/CVE-2026-10722.md): cilium ebpf LoadCollectionSpec/LoadCollectionSpecFromReader btf.go loadRawSpec integer overflow (CVSS 4.8)
- [CVE-2026-41520](https://cve.now/CVE-2026-41520.md): Cillium exposes sensitive information included in the cilium-bugtool debug archive (CVSS 7.9)
- [CVE-2026-33726](https://cve.now/CVE-2026-33726.md): Cilium L7 proxy may bypass Kubernetes NetworkPolicy for same-node traffic (CVSS 5.4)
- [CVE-2026-26963](https://cve.now/CVE-2026-26963.md): Cilium may not enforce host firewall policies when Native Routing, WireGuard and Node Encryption are enabled (CVSS 6.1)
- [CVE-2025-64715](https://cve.now/CVE-2025-64715.md): Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic (CVSS 4.0)
- [CVE-2025-48056](https://cve.now/CVE-2025-48056.md): Hubble CLI vulnerable to character injection (CVSS 5.3)
- [CVE-2025-32793](https://cve.now/CVE-2025-32793.md): Cilium packets from terminating endpoints may not be encrypted in Wireguard-enabled clusters (CVSS 4.0)
- [CVE-2025-30163](https://cve.now/CVE-2025-30163.md): Node based network policies may incorrectly allow workload traffic (CVSS 3.4)
- [CVE-2025-30162](https://cve.now/CVE-2025-30162.md): East-west traffic not subject to egress policy enforcement for requests via Gateway API load balancers (CVSS 3.2)
- [CVE-2025-23047](https://cve.now/CVE-2025-23047.md): Cilium vulnerable to information leakage via insecure default Hubble UI CORS header (CVSS 6.5)
- [CVE-2025-23028](https://cve.now/CVE-2025-23028.md): DoS in Cilium agent DNS proxy from crafted DNS responses (CVSS 5.3)
- [CVE-2024-52529](https://cve.now/CVE-2024-52529.md): Layer 7 policy enforcement may not occur in policies with wildcarded port ranges in Cilium (CVSS 5.8)
- [CVE-2024-47825](https://cve.now/CVE-2024-47825.md): CIDR deny policies may not take effect when a more narrow CIDR allow is present (CVSS 4.0)
- [CVE-2024-42486](https://cve.now/CVE-2024-42486.md): Cilium vulnerable to information leakage via incorrect ReferenceGrant update logic in Gateway API (CVSS 5.4)
- [CVE-2024-42488](https://cve.now/CVE-2024-42488.md): Cilium agent's race condition may lead to policy bypass for Host Firewall policy (CVSS 6.8)
- [CVE-2024-42487](https://cve.now/CVE-2024-42487.md): Cilium's Gateway API route matching order contradicts specification (CVSS 4.0)
- [CVE-2024-37307](https://cve.now/CVE-2024-37307.md): Cilium leaks sensitive information in cilium-bugtool (CVSS 7.9)
- [CVE-2024-28860](https://cve.now/CVE-2024-28860.md): Insecure IPsec transport encryption in Cilium (CVSS 8.0)
- [CVE-2024-28250](https://cve.now/CVE-2024-28250.md): Cilium has possible unencrypted traffic between nodes when using WireGuard and L7 policies (CVSS 6.1)
- [CVE-2024-28249](https://cve.now/CVE-2024-28249.md): Cilium has possible unencrypted traffic between nodes when using IPsec and L7 policies (CVSS 6.1)
- [CVE-2024-28248](https://cve.now/CVE-2024-28248.md): Cilium intermittent HTTP policy bypass (CVSS 7.2)
- [CVE-2024-25631](https://cve.now/CVE-2024-25631.md): Unencrypted traffic between pods when using Wireguard and an external kvstore (CVSS 6.1)
- [CVE-2024-25630](https://cve.now/CVE-2024-25630.md): Cilium has unencrypted ingress/health traffic when using Wireguard transparent encryption (CVSS 6.1)
- [CVE-2023-41332](https://cve.now/CVE-2023-41332.md): Denial of service via Kubernetes annotations in specific Cilium configurations (CVSS 3.5)
- [CVE-2023-41333](https://cve.now/CVE-2023-41333.md): Bypass of namespace restrictions in CiliumNetworkPolicy (CVSS 6.9)
- [CVE-2023-39347](https://cve.now/CVE-2023-39347.md): Cilium NetworkPolicy bypass via pod labels (CVSS 7.6)
- [CVE-2023-34242](https://cve.now/CVE-2023-34242.md): Cilium vulnerable to information leakage via incorrect ReferenceGrant handling (CVSS 3.4)
- [CVE-2023-30851](https://cve.now/CVE-2023-30851.md): Potential HTTP policy bypass when using header rules in Cilium (CVSS 2.6)
- [CVE-2023-29002](https://cve.now/CVE-2023-29002.md): Debug mode leaks confidential data in Cilium (CVSS 7.2)
- [CVE-2023-28114](https://cve.now/CVE-2023-28114.md): \`cilium-cli\` disables etcd authorization for clustermesh clusters (CVSS 4.8)
- [CVE-2023-27595](https://cve.now/CVE-2023-27595.md): Cilium eBPF filters may be temporarily removed during agent restart (CVSS 6.5)
- [CVE-2023-27594](https://cve.now/CVE-2023-27594.md): Cilium vulnerable to potential network policy bypass when routing IPv6 traffic (CVSS 4.2)
- [CVE-2023-27593](https://cve.now/CVE-2023-27593.md): cilium-agent container can access the host via \`hostPath\` mount (CVSS 4.4)
- [CVE-2022-29179](https://cve.now/CVE-2022-29179.md): Improper Privilege Management in Cilium (CVSS 7.5)
- [CVE-2022-29178](https://cve.now/CVE-2022-29178.md): Incorrect Default Permissions in Cilium (CVSS 8.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/cilium
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.