PT-2025-17449 · Cilium · Cilium

Gandro + 1 · Published 2025-04-21 · Updated 2025-04-23 · CVE-2025-32793

Positive Technologies (AI Summary)

CVSS v3.1

4.0

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cilium versions 1.15.0 through 1.15.15 Cilium versions 1.16.0 through 1.16.8 Cilium versions 1.17.0 through 1.17.2

Description Cilium is a networking, observability, and security solution with an eBPF-based dataplane. When using Wireguard transparent encryption in a Cilium cluster, packets that originate from a terminating endpoint can leave the source node without encryption due to a race condition in how traffic is processed by Cilium.

Recommendations For versions 1.15.0 through 1.15.15, update to version 1.15.16 or later. For versions 1.16.0 through 1.16.8, update to version 1.16.9 or later. For versions 1.17.0 through 1.17.2, update to version 1.17.3 or later.

Exploit

Fix

Cleartext Transmission of Sensitive Information

Race Condition

Weakness Enumeration

CWE-319

CWE-362

Related Identifiers

BIT-CILIUM-2025-32793

BIT-CILIUM-OPERATOR-2025-32793

BIT-HUBBLE-RELAY-2025-32793

CVE-2025-32793

GHSA-5VXX-C285-PCQ4

GO-2025-3635

OPENSUSE-SU-2025:15017-1

Affected Products

Cilium

References · 42

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/32xxx/CVE-2025-32793.json · Exploit
• https://github.com/cilium/cilium/pull/38592 · Patch
• https://github.com/cilium/cilium/security/advisories/GHSA-5vxx-c285-pcq4 · Patch
• https://osv.dev/vulnerability/BIT-cilium-operator-2025-32793 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-32793 · Security Note
• https://osv.dev/vulnerability/BIT-cilium-2025-32793 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15017-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-5vxx-c285-pcq4 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-32793 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-hubble-relay-2025-32793 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-3635 · Vendor Advisory
• https://github.com/cilium/cilium · Note
• https://github.com/cilium/cilium/commit/e8543eef05126e9ba8a845dc74e96f4e30f6dba9 · Note
• https://suse.com/security/cve/CVE-2025-1386 · Note
• https://lists.opensuse.org/archives/list/[e-mail]/thread/XCF7AZBKQYAQXK32J6F54H6NREFBK2V7 · Note