Aloys Augustin

**Name of the Vulnerable Software and Affected Versions** Calico versions 3.22.1 and below Calico Enterprise versions 3.12.0 and below **Description** The issue is related to insufficient validation in the floating IP feature, which may allow a privileged attacker to set a floating IP annotation to a pod even if the feature is not enabled. This could enable the attacker to intercept and reroute traffic to their compromised pod. **Recommendations** For Calico versions 3.22.1 and below, consider disabling the floating IP feature until a patch is available. For Calico Enterprise versions 3.12.0 and below, restrict access to the floating IP annotation to minimize the risk of exploitation.