CVE-2026-49445
CVE-2026-49445
9.2
CriticalPublished:
Last updated:
Source:security-advisories@github.com
Analyzed
Weakness (CWE)
CVSS Vector
v3.1- Attack Vector
- Local
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- None
- Scope
- Changed
- Confidentiality
- High
- Integrity
- Low
- Availability
- High
Description
Cilium is a networking, observability, and security solution. Prior to 1.17.14, 1.18.8, and 1.19.2, when Cilium L7 functionality is enabled, the embedded or standalone Envoy instance creates a world-accessible admin.sock on cluster nodes, allowing a local attacker to access Envoy admin endpoints, expose TLS secrets, disrupt cluster traffic, or terminate Envoy. This issue is fixed in versions 1.17.14, 1.18.8, and 1.19.2.
References
security-advisories@github.com
https://github.com/cilium/cilium/commit/7bfbdd5c1be83d6c9ba3e089b4c804b6603505b6security-advisories@github.com
https://github.com/cilium/cilium/pull/44512security-advisories@github.com
https://github.com/cilium/cilium/releases/tag/v1.17.14security-advisories@github.com
https://github.com/cilium/cilium/releases/tag/v1.18.8security-advisories@github.com
https://github.com/cilium/cilium/releases/tag/v1.19.2security-advisories@github.com
https://github.com/cilium/cilium/security/advisories/GHSA-3fcv-jvfp-m4q9