tocsin

Go/github.com/cilium/cilium CVE-2026-49445: unknown, EPSS 0.17%

Cilium vulnerable to sensitive information disclosure and cluster disruption via local Envoy admin socket access in github.com/cilium/cilium

Action: Upgrade github.com/cilium/cilium to 1.17.14 or later.

go get github.com/cilium/cilium@v1.17.14
go get github.com/cilium/cilium@v1.18.8
go get github.com/cilium/cilium@v1.19.2

Affected

introducedfixedlast affected
01.17.14-
1.18.01.18.8-
1.19.01.19.2-

Fixed versions

1.17.141.18.81.19.2

Sources

CVE-2026-49445 · published · modified · JSON