PT-2026-56056 · Cilium · Cilium

Ysksuzuki · Published 2026-07-06 · Updated 2026-07-07 · CVE-2026-53935

Positive Technologies (AI Summary)

CVSS v3.1

6.9

Medium

Base vector

AV:A/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cilium versions 1.19.0 through 1.19.3 Cilium versions 1.18.2 through 1.18.9 Cilium versions prior to 1.17.16

Description Users capable of creating CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs using the addressMatcher parameter. This allows for the hijacking of traffic to Services in any namespace, which bypasses the namespace-scoping guarantees typically enforced by the serviceMatcher. Furthermore, the deletion of such a policy can corrupt the internal service state of Cilium, potentially causing service translation to fail completely for the affected Service.

Recommendations Update to version 1.19.4 Update to version 1.18.10 Update to version 1.17.16

Fix

Open Redirect

Incorrect Authorization

Weakness Enumeration

CWE-601

CWE-863

Related Identifiers

CVE-2026-53935

GHSA-Q6H5-Q3Q6-F87X

GO-2026-5914

Affected Products

Cilium

References · 14

• https://osv.dev/vulnerability/GO-2026-5914 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-q6h5-q3q6-f87x · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-53935 · Security Note
• https://github.com/cilium/cilium/commit/fe7eb53c7aac9fa7ec610b1975d73fbbb198c66d · Note
• https://github.com/cilium/cilium/pull/45584 · Note
• https://github.com/cilium/cilium/commit/81d446395673dc2c684c047c12715caffac1a351 · Note
• https://github.com/cilium/cilium/pull/45585 · Note
• https://github.com/cilium/cilium/pull/45412 · Note
• https://github.com/cilium/cilium/commit/92ca32eda85aa0c7611c28221cc26fa08be17ebc · Note
• https://github.com/cilium/cilium/pull/44512 · Note
• https://github.com/cilium/cilium/security/advisories/GHSA-q6h5-q3q6-f87x · Note
• https://github.com/cilium/cilium/pull/44585 · Note
• https://github.com/cilium/cilium/pull/44584 · Note
• https://github.com/cilium/cilium · Note