high7.9
CVE-2026-41520
Cilium is a networking, observability, and security solution with an eBPF-based dataplane.
Impact
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.17.15, 1.18.9, and 1.19.3, the output of cilium-bugtool can contain sensitive data when the tool is run against Cilium deployments with WireGuard encryption enabled. This issue has been patched in versions 1.17.15, 1.18.9, and 1.19.3.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | github.com/cilium/cilium | < 1.17.15 | 1.17.15 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cilium | Cilium | before 1.17.15 from 1.18.0 before 1.18.9 from 1.19.0 before 1.19.3 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/advisories/GHSA-gj49-89wh-h4gj
- https://github.com/cilium/cilium/security/advisories/GHSA-gj49-89wh-h4gj
- https://github.com/cilium/cilium/releases/tag/v1.17.15
- https://github.com/cilium/cilium/releases/tag/v1.18.9
- https://github.com/cilium/cilium/releases/tag/v1.19.3
- http://docs.cilium.io/en/stable/security/network/encryption-wireguard
- https://nvd.nist.gov/vuln/detail/CVE-2026-41520