CVE-2026-56743

5.4 Moyenne

Publiée le 15/07/2026 à 22:17 · Modifiée le 17/07/2026 à 19:29 · Analysée par le NVD · Source : security-advisories@github.com

Description

Cilium is a networking, observability, and security solution. From 1.19.0 to 1.19.4, standard Kubernetes NetworkPolicy specifications using CIDR-based ipBlock rules without pod or namespace selectors erroneously generate a wildcard namespace allow rule when Cilium is configured with a custom clusterName rather than the default any value. The parser incorrectly instantiates a pod selector on selectorless peer definitions, allowing traffic from other workloads in the same namespace as the subject of the policy. This issue is fixed in version 1.19.5.

Traduire en français

Produits concernés

cilium
Cilium cilium

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.4 Moyenne	security-advisories@github.com	`CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N`

Faiblesses (CWE)

CWE-863

Références

https://github.com/cilium/cilium/commit/1c84ae3b58a7cd54f7ee355e6c524c82f620eae8 Patch
https://github.com/cilium/cilium/commit/bacea640404c0805c23515353dc1681c5bf35171 Patch
https://github.com/cilium/cilium/pull/46305 Patch
https://github.com/cilium/cilium/pull/46456 Patch
https://github.com/cilium/cilium/releases/tag/v1.19.5 Release Notes
https://github.com/cilium/cilium/security/advisories/GHSA-fm8w-2m5w-9j7r Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories