Cilium may not enforce host firewall policies when Native Ro… (CVE-2026-26963)

Résumé

Cilium may not enforce host firewall policies when Native Routing, WireGuard and Node Encryption are enabled

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.18.0 through 1.18.5 will incorrectly permit traffic from Pods on other nodes when Native Routing, WireGuard and Node Encryption are enabled. This issue has been fixed in version 1.18.6.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Paquets affectés

Bitnami cilium-operator

[{"type":"SEMVER","events":[{"introduced":"1.18.0"},{"fixed":"1.18.6"}]}]

Bitnami cilium

[{"type":"SEMVER","events":[{"introduced":"1.18.0"},{"fixed":"1.18.6"}]}]

Bitnami hubble-relay

[{"type":"SEMVER","events":[{"introduced":"1.18.0"},{"fixed":"1.18.6"}]}]

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Ubuntu UBUNTU-CVE-2026-26963 golang-github-cilium-ebpf

Références

advisory github.com
patch github.com
report github.com
web github.com
web nvd.nist.gov