PT-2025-48349 · Cilium · Cilium

Published 2025-11-29 · Updated 2026-05-18 · CVE-2025-64715

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cilium versions prior to 1.16.17 Cilium versions prior to 1.17.10 Cilium versions prior to 1.18.4

Description Cilium is a networking, observability, and security solution with an eBPF-based dataplane. CiliumNetworkPolicys utilizing egress.toGroups.aws.securityGroupsIds referencing non-existent or unattached AWS security group IDs may unintentionally permit wider outbound access than intended. Specifically, the toCIDRset section of the resulting policy is not generated, potentially allowing traffic to more destinations than originally configured.

Recommendations Update to Cilium version 1.16.17 or later. Update to Cilium version 1.17.10 or later. Update to Cilium version 1.18.4 or later.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BIT-CILIUM-2025-64715

BIT-CILIUM-OPERATOR-2025-64715

BIT-HUBBLE-RELAY-2025-64715

CLEANSTART-2026-NB78893

CLEANSTART-2026-QA19540

CLEANSTART-2026-SQ24713

CLEANSTART-2026-VU90450

CVE-2025-64715

GHSA-38PP-6GCP-RQVM

GO-2025-4167

SUSE-SU-2026:0037-1

Affected Products

Cilium

References · 126

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/64xxx/CVE-2025-64715.json · Exploit
• https://github.com/cilium/cilium/security/advisories/GHSA-38pp-6gcp-rqvm · Vendor Advisory
• https://github.com/cilium/cilium/commit/a385856b59c8289cc7273fa3a3062bbf0ef96c97 · Patch
• https://osv.dev/vulnerability/BIT-hubble-relay-2025-64715 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-27139 · Security Note
• https://osv.dev/vulnerability/GO-2025-4167 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-QA19540 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-64715 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61728 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-68119 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-33186 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0037-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61726 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-VU90450 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-64715 · Security Note