BIT-cilium-2026-26963

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/cilium/BIT-cilium-2026-26963.json
JSON Data
https://api.osv.dev/v1/vulns/BIT-cilium-2026-26963
Aliases
Published
2026-02-21T08:36:53.368Z
Modified
2026-02-21T10:55:57.123242Z
Summary
Cilium may not enforce host firewall policies when Native Routing, WireGuard and Node Encryption are enabled
Details

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.18.0 through 1.18.5 will incorrectly permit traffic from Pods on other nodes when Native Routing, WireGuard and Node Encryption are enabled. This issue has been fixed in version 1.18.6.

Database specific
{
    "severity": "Medium",
    "cpes": [
        "cpe:2.3:a:cilium:cilium:*:*:*:*:*:*:*:*"
    ]
}
References

Affected packages

Bitnami / cilium

Package

Name
cilium
Purl
pkg:bitnami/cilium

Severity

  • 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
1.18.0
Fixed
1.18.6

Database specific

source
"https://github.com/bitnami/vulndb/tree/main/data/cilium/BIT-cilium-2026-26963.json"