Most recent entries from all

BIT-cilium-2026-49445 — Cilium: Sensitive information disclosure and cluster disruption via local Envoy admin socket access

2026-10-06T06:42:04.533674+00:00

Affected: Bitnami: cilium

Cilium is a networking, observability, and security solution. Prior to 1.17.14, 1.18.8, and 1.19.2, when Cilium L7 functionality is enabled, the embedded or standalone Envoy instance creates a world-accessible admin.sock on cluster nodes, allowing a local attacker to access Envoy admin endpoints, expose TLS secrets, disrupt cluster traffic, or terminate Envoy. This issue is fixed in versions 1.17.14, 1.18.8, and 1.19.2.

EUVD-2026-338283

2026-10-06T06:42:04.533729+00:00

EUVD-2026-338283

fkie_cve-2026-49445

2026-10-06T06:42:04.533745+00:00

GHSA-3fcv-jvfp-m4q9 — Cilium vulnerable to sensitive information disclosure and cluster disruption via local Envoy admin socket access

2026-10-06T06:42:04.533770+00:00

Affected: Go: github.com/cilium/cilium

### Impact

When Cilium L7 functionality is enabled on a cluster, the Envoy instance supporting this functionality creates a world-accessible socket on cluster nodes. A local attacker would be able to access Envoy admin endpoints. Depending on deployment configuration, this can expose sensitive information or allow disruptive administrative operations, such as:

- Exposing TLS secrets - Disrupting traffic in the cluster - Terminating the Envoy process

This issue affects both the embedded and standalone Envoy deployment models.

### Patches

This issue affects:

- Cilium v1.19 between v1.19.0 and v1.19.1 inclusive - Cilium v1.18 between v1.18.0 and v1.18.7 inclusive - All versions of Cilium prior to v1.17.14

This issue has been patched in https://github.com/cilium/cilium/pull/44512, included in:

- Cilium v1.19.2 - Cilium v1.18.8 - Cilium v1.17.14

### Workarounds

There is no known workaround to this issue.

### Acknowledgements

The Cilium community has worked together with members of Isovalent to prepare these mitigations. Special thanks to [moemen](https://github.com/moemen) for reporting the issue and [0xch4z](https://github.com/0xch4z) for their work on triaging and remediating this issue.

### For more information

If there are any questions or comments about this advisory, please reach out on [Slack (https://docs.cilium.io/en/latest/community/community/).

If anyone thinks they have found a vulnerability affecting Cilium, it is strongly encouraged to report it to…

openSUSE-SU-2026:11519-1 — kubeshark-cli-53.4.0-1.1 on GA media

2026-10-06T06:42:04.533819+00:00

kubeshark-cli-53.4.0-1.1 on GA media