Go/github.com/cilium/cilium CVE-2025-30163: medium 4.7, EPSS 0.21%
Cilium node based network policies may incorrectly allow workload traffic in github.com/cilium/cilium
Action: Upgrade github.com/cilium/cilium to 1.16.8 or later.
go get github.com/cilium/cilium@v1.16.8go get github.com/cilium/cilium@v1.17.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.16.0 | 1.16.8 | - |
| 1.17.0 | 1.17.2 | - |
Fixed versions
| 1.16.8 | 1.17.2 |
Sources
- osv: GO-2025-3561
- nvd: CVE-2025-30163
- https://github.com/cilium/cilium/security/advisories/GHSA-c6pf-2v8j-96mc
- https://github.com/cilium/cilium/pull/36657
- https://docs.cilium.io/en/stable/security/policy/language/#node-based
CVE-2025-30163 · published · modified · JSON