—

GO-2026-5914

CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation in github.com/cilium/cilium

Details

CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation in github.com/cilium/cilium

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/cilium/cilium

Introduced in: 0 Fixed in: 1.17.16

Fix go get github.com/cilium/cilium@v1.17.16

References

https://github.com/cilium/cilium/security/advisories/GHSA-q6h5-q3q6-f87x [ADVISORY]
https://github.com/cilium/cilium/pull/44512 [FIX]
https://github.com/cilium/cilium/pull/44584 [FIX]
https://github.com/cilium/cilium/pull/44585 [FIX]