PT-2025-50280 · Unknown+2 · Cni Portmap Plugin+2

Published 2025-12-09 · Updated 2026-05-18 · CVE-2025-67499

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions CNI portmap plugin versions 1.6.0 through 1.8.0

Description The CNI portmap plugin flaw allows containers to intercept traffic not intended for the node. This occurs when the plugin is configured with the nftables backend, inadvertently forwarding all traffic with the same destination port as the host port, regardless of the destination IP address. Containers requesting HostPort forwarding can intercept all traffic destined for that port. This requires explicit configuration of the portmap plugin to use the nftables backend.

Recommendations Configure the portmap plugin to use the iptables backend for versions 1.6.0 through 1.8.0. Update to version 1.9.0 for versions 1.6.0 through 1.8.0.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2026-03462

CLEANSTART-2026-KY75084

CLEANSTART-2026-TO88856

CVE-2025-67499

GHSA-JV3W-X3R3-G6RM

GO-2025-4222

OPENSUSE-SU-2026:10261-1

SUSE-SU-2026:0037-1

Affected Products

Alt Linux

Cni Portmap Plugin

Red Os

References · 137

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/67xxx/CVE-2025-67499.json · Exploit
• https://github.com/containernetworking/plugins/security/advisories/GHSA-jv3w-x3r3-g6rm · Vendor Advisory
• https://github.com/containernetworking/plugins/pull/1210 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-27139 · Security Note
• https://bdu.fstec.ru/vul/2026-03462 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-KY75084 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61728 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-47914 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-61729 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-TO88856 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-33186 · Security Note
• https://osv.dev/vulnerability/GHSA-jv3w-x3r3-g6rm · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-67499 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0037-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61726 · Security Note