{"action":"Upgrade github.com/cilium/cilium to 1.17.14 or later.","affected":[{"fixed":"1.19.2","introduced":"1.19.0"},{"fixed":"1.18.8","introduced":"1.18.0"},{"fixed":"1.17.14","introduced":"0"}],"component":"github.com/cilium/cilium","cve_ids":["CVE-2026-49445"],"ecosystem":"Go","epss":0.00166,"exploited":false,"fixed_versions":["1.19.2","1.18.8","1.17.14"],"ghsa_id":"GHSA-3fcv-jvfp-m4q9","id":"tcs_01M5KETQ1V1SJ0W3AR0QGGEFST","modified_at":"2026-07-20T08:41:18.912957805Z","published_at":"2026-07-06T17:03:20Z","references":["https://osv.dev/vulnerability/GHSA-3fcv-jvfp-m4q9","https://github.com/cilium/cilium/security/advisories/GHSA-3fcv-jvfp-m4q9","https://github.com/cilium/cilium/pull/44512","https://github.com/cilium/cilium"],"severity":{"label":"critical","score":9.2},"sources":[{"source":"osv","source_id":"GHSA-3fcv-jvfp-m4q9","url":"https://osv.dev/vulnerability/GHSA-3fcv-jvfp-m4q9"}],"summary":"Cilium vulnerable to sensitive information disclosure and cluster disruption via local Envoy admin socket access"}