Beveiligingsadvies

CVE-2026-49445

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-15 19:11:55

Laatst bijgewerkt 2026-07-16 15:12:56

Toegewezen door GitHub_M

CVSS-score 9.2

Status PUBLISHED

Beschrijving

Cilium is a networking, observability, and security solution. Prior to 1.17.14, 1.18.8, and 1.19.2, when Cilium L7 functionality is enabled, the embedded or standalone Envoy instance creates a world-accessible admin.sock on cluster nodes, allowing a local attacker to access Envoy admin endpoints, expose TLS secrets, disrupt cluster traffic, or terminate Envoy. This issue is fixed in versions 1.17.14, 1.18.8, and 1.19.2.

← Alle CVE's bekijken Bekijk op cve.org ↗