Skip to content
Threat Feed
Subscribe

Vendor

Cilium

2 briefs RSS
critical advisory

Cilium L7 Envoy Admin Socket Vulnerability (CVE-2026-49445)

When Cilium L7 functionality is enabled, a world-accessible Envoy admin socket is inadvertently created on cluster nodes. This misconfiguration (CVE-2026-49445) allows a local attacker to gain unauthorized access to Envoy's administrative endpoints, leading to sensitive information disclosure, such as the exposure of TLS secrets, and significant cluster disruption, including the interruption of traffic and the termination of Envoy processes.

Cilium v1.19 +2 vulnerability kubernetes container cilium envoy local-privilege-escalation information-disclosure denial-of-service +1
2t
high advisory

Cilium `cilium-bugtool` WireGuard Private Key Exposure

The `cilium-bugtool` debugging tool in Cilium exposes WireGuard private keys, potentially allowing unauthorized access to encrypted node-to-node communication in affected versions.

Cilium wireguard key-disclosure credential-access
2r 1t 1i