CVSS 3.1
4.4 mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NCVE-2026-41520
Medium (4.4) in cilium cilium. EPSS 0.08% chance of exploitation in the next 30 days. Fixed in github.com/cilium/cilium 1.17.15, 1.18.9, 1.19.3.
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.17.15, 1.18.9, and 1.19.3, the output of cilium-bugtool can contain sensitive data when the tool is run against Cilium deployments with WireGuard encryption enabled. This issue has been patched in versions 1.17.15, 1.18.9, and 1.19.3.
Severity
- EPSS
- 0.08% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-312, CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- cilium:cilium
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-gj49-89wh-h4gj | Go | github.com/cilium/cilium | <1.17.15 | 1.17.15 |
| GHSA-gj49-89wh-h4gj | Go | github.com/cilium/cilium | >=1.18.0 <1.18.9 | 1.18.9 |
| GHSA-gj49-89wh-h4gj | Go | github.com/cilium/cilium | >=1.19.0 <1.19.3 | 1.19.3 |
| GO-2026-5400 | Go | github.com/cilium/cilium | <1.17.15 >=1.18.0 <1.18.9 >=1.19.0 <1.19.3 | 1.17.15, 1.18.9, 1.19.3 |