CVE-2026-26963
Cilium may not enforce host firewall policies when Native Routing, WireGuard and Node Encryption are enabled
Summary
Cilium may not enforce host firewall policies when Native Routing, WireGuard and Node Encryption are enabled
Original description
The description as published by the source.
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.18.0 through 1.18.5 will incorrectly permit traffic from Pods on other nodes when Native Routing, WireGuard and Node Encryption are enabled. This issue has been fixed in version 1.18.6.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
cilium-operator
[{"type":"SEMVER","events":[{"introduced":"1.18.0"},{"fixed":"1.18.6"}]}]
Bitnami
cilium
[{"type":"SEMVER","events":[{"introduced":"1.18.0"},{"fixed":"1.18.6"}]}]
Bitnami
hubble-relay
[{"type":"SEMVER","events":[{"introduced":"1.18.0"},{"fixed":"1.18.6"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Ubuntu UBUNTU-CVE-2026-26963 golang-github-cilium-ebpf
References
- advisory github.com
- advisory nvd.nist.gov
- advisory github.com
- patch github.com
- patch github.com
- web github.com