tocsin

Go/github.com/cilium/cilium CVE-2026-53935: medium 6.9, EPSS 0.34%

CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation in github.com/cilium/cilium

Action: Upgrade github.com/cilium/cilium to 1.17.16 or later.

go get github.com/cilium/cilium@v1.17.16
go get github.com/cilium/cilium@v1.18.10
go get github.com/cilium/cilium@v1.19.4

Affected

introducedfixedlast affected
01.17.16-
1.18.21.18.10-
1.19.01.19.4-

Fixed versions

1.17.161.18.101.19.4

Sources

CVE-2026-53935 · published · modified · JSON