tocsin

Go/github.com/cilium/cilium CVE-2026-49445: critical 9.2, EPSS 0.17%

Cilium vulnerable to sensitive information disclosure and cluster disruption via local Envoy admin socket access

Action: Upgrade github.com/cilium/cilium to 1.17.14 or later.

go get github.com/cilium/cilium@v1.19.2
go get github.com/cilium/cilium@v1.18.8
go get github.com/cilium/cilium@v1.17.14

Affected

introducedfixedlast affected
1.19.01.19.2-
1.18.01.18.8-
01.17.14-

Fixed versions

1.19.21.18.81.17.14

Sources

CVE-2026-49445 · published · modified · JSON