← Vulnerability feed

Vulnerability record · CVE-2022-29179 · published 20 May 2022

CVE-2022-29179: Cilium improper privilege management vulnerability

Cilium · Cilium

Cilium is open source software for providing and securing network connectivity and loadbalancing between application workloads. Prior to versions 1.9.16, 1.10.11, and 1.11.15, if an attacker is able to perform a container escape of a container running as root on a host where Cilium is installed, the attacker can escalate privileges to cluster admin by using Cilium's Kubernetes service account. The problem has been fixed and the patch is available in versions 1.9.16, 1.10.11, and 1.11.5. There are no known workarounds available.

8.2 CVSS 3.1 High EPSS 0.36% · top 72.8% CWE-269 · Improper privilege management
8.2CVSS 3.1 base score, v2 7.2
0.36%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References
17 Jun 2026Last modified by NVD

Description

Cilium is open source software for providing and securing network connectivity and loadbalancing between application workloads. Prior to versions 1.9.16, 1.10.11, and 1.11.15, if an attacker is able to perform a container escape of a container running as root on a host where Cilium is installed, the attacker can escalate privileges to cluster admin by using Cilium's Kubernetes service account. The problem has been fixed and the patch is available in versions 1.9.16, 1.10.11, and 1.11.5. There are no known workarounds available.

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/cilium/cilium/releases/tag/v1.10.11 Release NotesThird Party Advisory
https://github.com/cilium/cilium/releases/tag/v1.11.5 Release NotesThird Party Advisory
https://github.com/cilium/cilium/releases/tag/v1.9.16 Release NotesThird Party Advisory
https://github.com/cilium/cilium/security/advisories/GHSA-fmrf-gvjp-5j5g Third Party Advisory
https://github.com/cilium/cilium/releases/tag/v1.10.11 Release NotesThird Party Advisory
https://github.com/cilium/cilium/releases/tag/v1.11.5 Release NotesThird Party Advisory
https://github.com/cilium/cilium/releases/tag/v1.9.16 Release NotesThird Party Advisory
https://github.com/cilium/cilium/security/advisories/GHSA-fmrf-gvjp-5j5g Third Party Advisory

Track CVE-2022-29179 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2023-27595Cilium vulnerabilityCilium is a networking, observability, and security solution with an eBPF-based dataplane. In version 1.13.0, when Cilium is started, there is a shor…EPSS 0.73%9.0CVE-2023-39347Cilium insufficient verification of data authenticity vulnerabilityCilium is a networking, observability, and security solution with an eBPF-based dataplane. An attacker with the ability to update pod labels can caus…EPSS 0.56%8.9CVE-2026-56742Cilium missing authorization vulnerabilityCilium is a networking, observability, and security solution. Prior to 1.17.17, 1.18.11, and 1.19.5, Cilium clusters using Gateway API allow users wi…EPSS 0.17%8.8CVE-2026-49445Cilium incorrect permission assignment vulnerabilityCilium is a networking, observability, and security solution. Prior to 1.17.14, 1.18.8, and 1.19.2, when Cilium L7 functionality is enabled, the embe…EPSS 0.17%8.7CVE-2024-47825Cilium incorrect default permissions vulnerabilityCilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.14.0 and prior to versions 1.14.16 a…EPSS 0.40%8.2CVE-2022-29178Cilium incorrect default permissions vulnerabilityCilium is open source software for providing and securing network connectivity and loadbalancing between application workloads. Cilium prior to versi…EPSS 0.28%8.1CVE-2023-41333Cilium missing authentication for critical function vulnerabilityCilium is a networking, observability, and security solution with an eBPF-based dataplane. An attacker with the ability to create or modify CiliumNet…EPSS 0.41%7.3CVE-2023-27594Cilium improper authorization vulnerabilityCilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.11.15, 1.12.8, and 1.13.1, under speci…EPSS 0.55%

Source: NIST National Vulnerability Database (record CVE-2022-29179), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.