{"action":"Upgrade antrea.io/antrea to 2.3.2 or later.","affected":[{"fixed":"2.3.2","introduced":"0"},{"fixed":"2.4.3","introduced":"2.4.0"}],"component":"antrea.io/antrea","cve_ids":["CVE-2026-25804"],"ecosystem":"Go","epss":0.00499,"exploited":false,"fixed_versions":["2.3.2","2.4.3"],"ghsa_id":"GHSA-86x4-wp9f-wrr9","id":"tcs_01M5KF38PQZFXPBM75ER3GRNCB","modified_at":"2026-02-19T20:41:02.251456Z","published_at":"2026-02-06T22:36:29Z","references":["https://osv.dev/vulnerability/GHSA-86x4-wp9f-wrr9","https://github.com/antrea-io/antrea/security/advisories/GHSA-86x4-wp9f-wrr9","https://nvd.nist.gov/vuln/detail/CVE-2026-25804","https://github.com/antrea-io/antrea/pull/7496","https://github.com/antrea-io/antrea/commit/86c4b6010f3be536866f339b632621c23d7186fa","https://gist.github.com/antoninbas/c429cc3e5bb8479ba7ff38fd6fde59d9","https://github.com/antrea-io/antrea","https://github.com/antrea-io/antrea/blob/main/docs/antrea-network-policy.md"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-86x4-wp9f-wrr9","url":"https://osv.dev/vulnerability/GHSA-86x4-wp9f-wrr9"},{"source":"nvd","source_id":"CVE-2026-25804","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25804"}],"summary":"Antrea has invalid enforcement order for network policy rules caused by integer overflow"}