CVE-2026-26963

MEDIUM6.1

Cilium may not enforce host firewall policies when Native Routing, WireGuard and Node Encryption are enabled

Published Feb 19, 2026

Modified 1 weeks ago

Details

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.18.0 through 1.18.5 will incorrectly permit traffic from Pods on other nodes when Native Routing, WireGuard and Node Encryption are enabled. This issue has been fixed in version 1.18.6.

References

WEB

https://github.com/cilium/cilium/commit/88e28e1e62c0b1a02c3f0fc22d888ac9eefbe885

WEB

https://github.com/cilium/cilium/pull/42892

WEB

https://github.com/cilium/cilium/releases/tag/v1.18.6

WEB

https://github.com/cilium/cilium/security/advisories/GHSA-5r23-prx4-mqg3

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-26963

CVSS Analysis