CVE-2026-49445
2 advisories.
Go/github.com/cilium/cilium CVE-2026-49445: critical 9.2
Cilium vulnerable to sensitive information disclosure and cluster disruption via local Envoy admin socket access
Action: Upgrade github.com/cilium/cilium to 1.17.14 or later.
go get github.com/cilium/cilium@v1.19.2go get github.com/cilium/cilium@v1.18.8go get github.com/cilium/cilium@v1.17.14Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.19.0 | 1.19.2 | - |
| 1.18.0 | 1.18.8 | - |
| 0 | 1.17.14 | - |
Fixed versions
| 1.19.2 | 1.18.8 | 1.17.14 |
Sources
- osv: GHSA-3fcv-jvfp-m4q9
- https://github.com/cilium/cilium/security/advisories/GHSA-3fcv-jvfp-m4q9
- https://github.com/cilium/cilium/pull/44512
- https://github.com/cilium/cilium
CVE-2026-49445 · published · modified · JSON
Go/github.com/cilium/cilium CVE-2026-49445: unknown
Cilium vulnerable to sensitive information disclosure and cluster disruption via local Envoy admin socket access in github.com/cilium/cilium
Action: Upgrade github.com/cilium/cilium to 1.17.14 or later.
go get github.com/cilium/cilium@v1.17.14go get github.com/cilium/cilium@v1.18.8go get github.com/cilium/cilium@v1.19.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.17.14 | - |
| 1.18.0 | 1.18.8 | - |
| 1.19.0 | 1.19.2 | - |
Fixed versions
| 1.17.14 | 1.18.8 | 1.19.2 |
Sources
- osv: GO-2026-5905
- https://github.com/cilium/cilium/security/advisories/GHSA-3fcv-jvfp-m4q9
- https://github.com/cilium/cilium/pull/44512
CVE-2026-49445 · published · modified · JSON