EUVD-2026-44772
GHSA-3fcv-jvfp-m4q9
Severity by source
AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Socket is local and world-accessible so AV:L/AC:L/PR:N; Envoy admin control affects other cluster workloads' secrets and traffic giving S:C, C:H and A:H.
AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:H
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
4DescriptionNVD
Impact
When Cilium L7 functionality is enabled on a cluster, the Envoy instance supporting this functionality creates a world-accessible socket on cluster nodes. A local attacker would be able to access Envoy admin endpoints. Depending on deployment configuration, this can expose sensitive information or allow disruptive administrative operations, such as:
- Exposing TLS secrets
- Disrupting traffic in the cluster
- Terminating the Envoy process
This issue affects both the embedded and standalone Envoy deployment models.
Patches
This issue affects:
- Cilium v1.19 between v1.19.0 and v1.19.1 inclusive
- Cilium v1.18 between v1.18.0 and v1.18.7 inclusive
- All versions of Cilium prior to v1.17.14
This issue has been patched in https://github.com/cilium/cilium/pull/44512, included in:
- Cilium v1.19.2
- Cilium v1.18.8
- Cilium v1.17.14
Workarounds
There is no known workaround to this issue.
Acknowledgements
The Cilium community has worked together with members of Isovalent to prepare these mitigations. Special thanks to moemen for reporting the issue and 0xch4z for their work on triaging and remediating this issue.
For more information
If there are any questions or comments about this advisory, please reach out on [Slack (https://docs.cilium.io/en/latest/community/community/).
If anyone thinks they have found a vulnerability affecting Cilium, it is strongly encouraged to report it to the security mailing list at [security@cilium.io](mailto:security@cilium.io). This is a private mailing list for the Cilium security team, and the report will be treated as a top priority.
AnalysisAI
Missing authorization on Cilium's Envoy admin socket lets any local user on a cluster node reach privileged Envoy admin endpoints when L7 (Layer 7) network policy functionality is enabled. Affecting Cilium 1.17.x before 1.17.14, 1.18.0-1.18.7, and 1.19.0-1.19.1 in both embedded and standalone Envoy models, it carries a CVSS 9.2 (scope-changing) rating and allows dumping TLS secrets, disrupting cluster traffic, or killing the Envoy proxy. No public exploit identified at time of analysis, and there is no workaround - only upgrading resolves it.
Technical ContextAI
Cilium is an eBPF-based CNI (Container Network Interface) for Kubernetes that offloads L7 policy enforcement, TLS termination, and traffic shaping to an embedded or standalone Envoy proxy. Envoy exposes an administrative interface (the admin endpoint) that supports operations such as retrieving configuration, dumping secrets/certificates, resetting counters, and draining or shutting down listeners. Per CWE-862 (Missing Authorization), Cilium bound this admin socket so that it was world-accessible on the node rather than restricting it to the Cilium/Envoy process context, meaning any local process or user on the node - regardless of privilege - could issue admin commands. The affected component is the Go module github.com/cilium/cilium (CPE pkg:go/github.com_cilium_cilium).
RemediationAI
Vendor-released patch: upgrade to Cilium 1.19.2, 1.18.8, or 1.17.14, which contain the fix from https://github.com/cilium/cilium/pull/44512 (advisory GHSA-3fcv-jvfp-m4q9). The vendor states there is no known workaround, so patching is the only remediation. As interim compensating controls until you can upgrade, reduce the local attack surface by disabling Cilium L7 policy/proxy functionality if it is not required (this removes the vulnerable Envoy socket but also removes L7 policy, TLS interception, and observability features), tightening node-level access so untrusted workloads and users cannot obtain local execution on nodes, and enforcing pod security / hostPath and shared-namespace restrictions to prevent co-located containers from reaching the node's Envoy socket - with the trade-off that these controls do not fully close the exposure and may not be feasible in multi-tenant clusters.
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allVendor StatusVendor
SUSE
Severity: Important| Product | Status |
|---|---|
| SUSE Linux Enterprise Server 16.1 | Affected |
| SUSE Linux Enterprise Server for SAP applications 16.1 | Affected |
| SUSE Linux Enterprise Module for Package Hub 15 SP5 | Affected |
| SUSE Linux Enterprise Module for Package Hub 15 SP6 | Affected |
| openSUSE Leap 15.5 | Affected |
| openSUSE Leap 15.6 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today