CVSS 3.1
8.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HCVE-2026-49445
High (8.8) in cilium cilium. EPSS 0.2% chance of exploitation in the next 30 days. Fixed in github.com/cilium/cilium 1.17.14, 1.18.8, 1.19.2.
Cilium is a networking, observability, and security solution. Prior to 1.17.14, 1.18.8, and 1.19.2, when Cilium L7 functionality is enabled, the embedded or standalone Envoy instance creates a world-accessible admin.sock on cluster nodes, allowing a local attacker to access Envoy admin endpoints, expose TLS secrets, disrupt cluster traffic, or terminate Envoy. This issue is fixed in versions 1.17.14, 1.18.8, and 1.19.2.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 5% of CVEs (scores of 2026-10-31)
- CWE
- CWE-732
- Published
- Modified
- Record from
- the NVD, synced
Affected
- cilium:cilium
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-3fcv-jvfp-m4q9 | Go | github.com/cilium/cilium | >=1.19.0 <1.19.2 | 1.19.2 |
| GHSA-3fcv-jvfp-m4q9 | Go | github.com/cilium/cilium | >=1.18.0 <1.18.8 | 1.18.8 |
| GHSA-3fcv-jvfp-m4q9 | Go | github.com/cilium/cilium | <1.17.14 | 1.17.14 |
| GO-2026-5905 | Go | github.com/cilium/cilium | <1.17.14 >=1.18.0 <1.18.8 >=1.19.0 <1.19.2 | 1.17.14, 1.18.8, 1.19.2 |