Cilium is a container-networking and security platform widely used in Kubernetes environments to manage network policies and observability across cloud-native infrastructure. The vendor's vulnerability footprint is concentrated in its core Cilium agent and CLI tooling, and its disclosures span a meaningful share of serious-severity outcomes, reflecting the elevated trust and access inherent to a cluster-level networking control plane. The recurring weakness classes—cleartext transmission of credentials and sensitive data, unintended exposure of configuration or state, authorization bypasses, and improper exception handling—concentrate in areas where the platform interfaces with cluster authentication, service-to-service communication, and policy enforcement. Defenders should treat Cilium advisories as high-priority for any Kubernetes environment where it governs network access, as flaws in this layer can affect workload isolation and cluster-wide traffic visibility; live severity and exploitation counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Cilium over time
Signals from CVEs in this vendor scope (37 CVEs).
37 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-49445HIGH Cilium is a networking, observability, and security solution. Prior to 1.17.14, 1.18.8, and 1.19.2, when Cilium L7 functionality is enabled, the embedded or standalone Envoy instan | Jul 15, 2026 | 8.8 | 38 | NO | NO |
CVE-2026-56742HIGH Cilium is a networking, observability, and security solution. Prior to 1.17.17, 1.18.11, and 1.19.5, Cilium clusters using Gateway API allow users with permissions to create or upd | Jul 15, 2026 | 8.9 | 35 | NO | NO |
CVE-2023-27595CRITICAL Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In version 1.13.0, when Cilium is started, there is a short period when Cilium eBPF progr | Mar 17, 2023 | 9.8 | 31 | NO | NO |
CVE-2026-10722MEDIUM A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromR | Jun 3, 2026 | 5.5 | 26 | NO | NO |
CVE-2023-39347CRITICAL Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An attacker with the ability to update pod labels can cause Cilium to apply incorrect net | Sep 27, 2023 | 9.0 | 26 | NO | NO |
CVE-2022-29179HIGH Cilium is open source software for providing and securing network connectivity and loadbalancing between application workloads. Prior to versions 1.9.16, 1.10.11, and 1.11.15, if a | May 20, 2022 | 8.2 | 26 | NO | NO |
CVE-2026-56743MEDIUM Cilium is a networking, observability, and security solution. From 1.19.0 to 1.19.4, standard Kubernetes NetworkPolicy specifications using CIDR-based ipBlock rules without pod or | Jul 15, 2026 | 5.4 | 25 | NO | NO |
CVE-2022-29178HIGH Cilium is open source software for providing and securing network connectivity and loadbalancing between application workloads. Cilium prior to versions 1.9.16, 1.10.11, and 1.11.1 | May 20, 2022 | 8.2 | 25 | NO | NO |
CVE-2024-47825HIGH Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.14.0 and prior to versions 1.14.16 and 1.15.10, a policy rule denyi | Oct 21, 2024 | 8.7 | 24 | NO | NO |
CVE-2023-41333HIGH Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An attacker with the ability to create or modify CiliumNetworkPolicy objects in a particu | Sep 27, 2023 | 8.1 | 24 | NO | NO |
Signals from CVEs in this vendor scope (37 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Cilium.
Media articles that mention a CVE ID that affects a product developed by Cilium — matched by CVE ID, not by vendor name.