Vendor

    Cilium

    40 known vulnerabilities in products by Cilium, 0 of them actively exploited (CISA KEV).

    Key figures

    40

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Cilium
    HighCVE-2026-65960

    Tetragon: Unauthenticated Tetragon gRPC admin API accessible from hostNetwork pods

    		8.8
    CriticalCVE-2026-49445

    Cilium: Sensitive information disclosure and cluster disruption via local Envoy admin socket access

    also in 1 other product

    		9.2
    HighCVE-2024-28248

    Cilium intermittent HTTP policy bypass

    also in 1 other product

    		7.2
    MediumCVE-2026-53935

    Cilium: Incorrect Authorization

    also in 1 other product

    		6.9
    CriticalCVE-2023-39347

    Cilium NetworkPolicy bypass via pod labels

    also in 1 other product

    		7.6
    CriticalCVE-2023-27595

    Cilium eBPF filters may be temporarily removed during agent restart

    also in 1 other product

    		6.5
    HighCVE-2026-41520

    Cillium exposes sensitive information included in the cilium-bugtool debug archive

    also in 1 other product

    		4.4
    MediumCVE-2024-42488

    Cilium agent's race condition may lead to policy bypass for Host Firewall policy

    also in 1 other product

    		6.8
    MediumCVE-2025-23047

    Cilium vulnerable to information leakage via insecure default Hubble UI CORS header

    also in 1 other product

    		6.5
    HighCVE-2023-41333

    Bypass of namespace restrictions in CiliumNetworkPolicy

    also in 1 other product

    		6.9
    MediumCVE-2024-52529

    Layer 7 policy enforcement may not occur in policies with wildcarded port ranges in Cilium

    also in 1 other product

    		5.8
    HighCVE-2024-42486

    Cilium vulnerable to information leakage via incorrect ReferenceGrant update logic in Gateway API

    also in 1 other product

    		5.4
    HighCVE-2026-56742

    Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces

    also in 1 other product

    		5.9
    MediumCVE-2026-56743

    Cilium: Incorrect Authorization

    also in 1 other product

    		5.4
    HighCVE-2022-29178

    Incorrect Default Permissions in Cilium

    also in 1 other product

    		8.8
    MediumCVE-2025-23028

    DoS in Cilium agent DNS proxy from crafted DNS responses

    also in 1 other product

    		5.3
    HighCVE-2022-29179

    Improper Privilege Management in Cilium

    also in 1 other product

    		7.5
    HighCVE-2024-37307

    Cilium leaks sensitive information in cilium-bugtool

    also in 1 other product

    		7.9
    HighCVE-2024-28860

    Insecure IPsec transport encryption in Cilium

    also in 1 other product

    		8.0
    MediumCVE-2026-26963

    Cilium: Incorrect Authorization

    also in 1 other product

    		6.1
    MediumCVE-2026-33726

    Cilium L7 proxy may bypass Kubernetes NetworkPolicy for same-node traffic

    also in 1 other product

    		5.4
    MediumCVE-2024-42487

    Cilium's Gateway API route matching order contradicts specification

    also in 1 other product

    		4.0
    MediumCVE-2026-10722

    cilium ebpf LoadCollectionSpec/LoadCollectionSpecFromReader btf.go loadRawSpec integer overflow

    also in 1 other product

    		3.3
    HighCVE-2023-27594

    Cilium vulnerable to potential network policy bypass when routing IPv6 traffic

    also in 1 other product

    		4.2
    MediumCVE-2025-48056

    Hubble CLI vulnerable to character injection

    also in 1 other product

    		5.3

    All vulnerabilities in search

    News

    Products

    Products by Cilium
    Cilium360