https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 20:14:06 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-218831 EUVD-2026-218831 https://cve.radiocsirt.org/vuln/euvd-2026-218831 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28114 <p>`cilium-cli` is the command line interface to install, manage, and troubleshoot Kubernetes clusters running Cilium. Prior to version 0.13.2,`cilium-cli`, when used to configure cluster mesh functionality, can remove the enforcement of user permissions on the `etcd` store used to mirror local cluster information to remote clusters. Users who have set up cluster meshes using the Cilium Helm chart are not affected by this issue.</p> <p>Due to an incorrect mount point specification, the settings specified by the `initContainer` that configures `etcd` users and their permissions are overwritten when using `cilium-cli` to configure a cluster mesh. An attacker who has already gained access to a valid key and certificate for an `etcd` cluster compromised in this manner could then modify state in that `etcd` cluster.</p> <p>This issue is patched in `cilium-cli` 0.13.2. As a workaround, one may use Cilium&#39;s Helm charts to create their cluster.</p> <p>`cilium-cli` is the command line interface to install, manage, and troubleshoot Kubernetes clusters running Cilium. Prior to version 0.13.2,`cilium-cli`, when used to configure cluster mesh functionality, can remove the enforcement of user permissions on the `etcd` store used to mirror local cluster information to remote clusters. Users who have set up cluster meshes using the Cilium Helm chart are not affected by this issue.</p> <p>Due to an incorrect mount point specification, the settings specified by the `initContainer` that configures `etcd` users and their permissions are overwritten when using `cilium-cli` to configure a cluster mesh. An attacker who has already gained access to a valid key and certificate for an `etcd` cluster compromised in this manner could then modify state in that `etcd` cluster.</p> <p>This issue is patched in `cilium-cli` 0.13.2. As a workaround, one may use Cilium&#39;s Helm charts to create their cluster.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-28114 https://cve.radiocsirt.org/vuln/ghsa-6f27-3p6c-p5jc <p><strong>Affected:</strong> Go: github.com/cilium/cilium-cli</p> <p>### Impact</p> <p>`cilium-cli`, when used to configure cluster mesh functionality, can remove the enforcement of user permissions on the `etcd` store used to mirror local cluster information to remote clusters.</p> <p>Due to an incorrect mount point specification, the settings specified by the `initContainer` that configures `etcd` users and their permissions are overwritten when using `cilium-cli` to configure a cluster mesh. An attacker who has already gained access to a valid key and certificate for an `etcd` cluster compromised in this manner could then modify state in that `etcd` cluster.</p> <p>### Patches</p> <p>This issue is patched in `cilium-cli` 0.13.2</p> <p>All previous versions of `cilium-cli` are affected. Users who have set up cluster meshes using the Cilium Helm chart are not affected.</p> <p>### Workarounds</p> <p>Use Cilium&#39;s [Helm charts](https://artifacthub.io/packages/helm/cilium/cilium) to create your cluster instead.</p> <p>### Acknowledgements</p> <p>The Cilium community has worked together with members of Isovalent to prepare these mitigations. Special thanks to Marco Iorio for investigating and fixing the issue.</p> <p>### For more information If you have any questions or comments about this advisory, please reach out on [Slack](https://docs.cilium.io/en/latest/community/community/#slack).</p> <p>As usual, if you think you found a related vulnerability, we strongly encourage you to report security vulnerabilities to our private security mailing list: [security@cilium.io](mailto:security@cilium.io) - first, befor…</p> <p><strong>Affected:</strong> Go: github.com/cilium/cilium-cli</p> <p>### Impact</p> <p>`cilium-cli`, when used to configure cluster mesh functionality, can remove the enforcement of user permissions on the `etcd` store used to mirror local cluster information to remote clusters.</p> <p>Due to an incorrect mount point specification, the settings specified by the `initContainer` that configures `etcd` users and their permissions are overwritten when using `cilium-cli` to configure a cluster mesh. An attacker who has already gained access to a valid key and certificate for an `etcd` cluster compromised in this manner could then modify state in that `etcd` cluster.</p> <p>### Patches</p> <p>This issue is patched in `cilium-cli` 0.13.2</p> <p>All previous versions of `cilium-cli` are affected. Users who have set up cluster meshes using the Cilium Helm chart are not affected.</p> <p>### Workarounds</p> <p>Use Cilium&#39;s [Helm charts](https://artifacthub.io/packages/helm/cilium/cilium) to create your cluster instead.</p> <p>### Acknowledgements</p> <p>The Cilium community has worked together with members of Isovalent to prepare these mitigations. Special thanks to Marco Iorio for investigating and fixing the issue.</p> <p>### For more information If you have any questions or comments about this advisory, please reach out on [Slack](https://docs.cilium.io/en/latest/community/community/#slack).</p> <p>As usual, if you think you found a related vulnerability, we strongly encourage you to report security vulnerabilities to our private security mailing list: [security@cilium.io](mailto:security@cilium.io) - first, befor…</p> https://cve.radiocsirt.org/vuln/ghsa-6f27-3p6c-p5jc https://cve.radiocsirt.org/vuln/gsd-2023-28114 gsd-2023-28114 https://cve.radiocsirt.org/vuln/gsd-2023-28114