PT-2025-48349 · Cilium · Cilium

Published 2025-11-29 · Updated 2025-11-29 · CVE-2025-64715

Positive Technologies · (AI Summary)

CVSS v3.1

4.0

4.0

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cilium versions prior to 1.16.17 Cilium versions prior to 1.17.10 Cilium versions prior to 1.18.4

Description Cilium is a networking, observability, and security solution with an eBPF-based dataplane. CiliumNetworkPolicys utilizing

egress.toGroups.aws.securityGroupsIds

referencing non-existent or unattached AWS security group IDs may unintentionally permit wider outbound access than intended. Specifically, the

toCIDRset

section of the resulting policy is not generated, potentially allowing traffic to more destinations than originally configured.

Recommendations Update to Cilium version 1.16.17 or later. Update to Cilium version 1.17.10 or later. Update to Cilium version 1.18.4 or later.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-64715

Affected Products

Cilium

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-64715 · Security Note
• https://github.com/cilium/cilium/releases/tag/v1.18.4 · Note
• https://github.com/cilium/cilium/releases/tag/v1.16.17 · Note
• https://github.com/cilium/cilium/security/advisories/GHSA-38pp-6gcp-rqvm · Note
• https://github.com/cilium/cilium/commit/a385856b59c8289cc7273fa3a3062bbf0ef96c97 · Note
• https://github.com/cilium/cilium/releases/tag/v1.17.10 · Note
• https://twitter.com/VulmonFeeds/status/1994590154275651760 · Twitter Post
• https://twitter.com/CVEnew/status/1994599564586684493 · Twitter Post
• https://t.me/CVEtracker/38446 · Telegram Post