← Vulnerability feed

Vulnerability record · CVE-2023-27594 · published 17 March 2023

CVE-2023-27594: Cilium improper authorization vulnerability

Cilium · Cilium

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.11.15, 1.12.8, and 1.13.1, under specific conditions, Cilium may misattribute the source IP address of traffic to a cluster, identifying external traffic as coming from the host on which Cilium is running. As a consequence, network policies for that cluster might be bypassed, depending on the specific network policies enabled. This issue only manifests when Cilium is routing IPv6 traffic and NodePorts are used to route traffic to pods. IPv6 and endpoint routes are both disabled by default. The problem has been fixed and is available on versions 1.11.15, 1.12.8, and 1.13.1. As a workaround, disable IPv6 routing.

7.3 CVSS 3.1 High EPSS 0.55% · top 56.1% CWE-285 · Improper authorizationCWE-863 · Incorrect authorization
7.3CVSS 3.1 base score
0.55%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References
17 Jun 2026Last modified by NVD

Description

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.11.15, 1.12.8, and 1.13.1, under specific conditions, Cilium may misattribute the source IP address of traffic to a cluster, identifying external traffic as coming from the host on which Cilium is running. As a consequence, network policies for that cluster might be bypassed, depending on the specific network policies enabled. This issue only manifests when Cilium is routing IPv6 traffic and NodePorts are used to route traffic to pods. IPv6 and endpoint routes are both disabled by default. The problem has been fixed and is available on versions 1.11.15, 1.12.8, and 1.13.1. As a workaround, disable IPv6 routing.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/cilium/cilium/releases/tag/v1.11.15 Third Party Advisory
https://github.com/cilium/cilium/releases/tag/v1.12.8 Third Party Advisory
https://github.com/cilium/cilium/releases/tag/v1.13.1 Third Party Advisory
https://github.com/cilium/cilium/security/advisories/GHSA-8fg8-jh2h-f2hc Third Party Advisory
https://github.com/cilium/cilium/releases/tag/v1.11.15 Third Party Advisory
https://github.com/cilium/cilium/releases/tag/v1.12.8 Third Party Advisory
https://github.com/cilium/cilium/releases/tag/v1.13.1 Third Party Advisory
https://github.com/cilium/cilium/security/advisories/GHSA-8fg8-jh2h-f2hc Third Party Advisory

Track CVE-2023-27594 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2023-27595Cilium vulnerabilityCilium is a networking, observability, and security solution with an eBPF-based dataplane. In version 1.13.0, when Cilium is started, there is a shor…EPSS 0.73%9.0CVE-2023-39347Cilium insufficient verification of data authenticity vulnerabilityCilium is a networking, observability, and security solution with an eBPF-based dataplane. An attacker with the ability to update pod labels can caus…EPSS 0.56%8.9CVE-2026-56742Cilium missing authorization vulnerabilityCilium is a networking, observability, and security solution. Prior to 1.17.17, 1.18.11, and 1.19.5, Cilium clusters using Gateway API allow users wi…EPSS 0.17%8.8CVE-2026-49445Cilium incorrect permission assignment vulnerabilityCilium is a networking, observability, and security solution. Prior to 1.17.14, 1.18.8, and 1.19.2, when Cilium L7 functionality is enabled, the embe…EPSS 0.17%8.7CVE-2024-47825Cilium incorrect default permissions vulnerabilityCilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.14.0 and prior to versions 1.14.16 a…EPSS 0.40%8.2CVE-2022-29178Cilium incorrect default permissions vulnerabilityCilium is open source software for providing and securing network connectivity and loadbalancing between application workloads. Cilium prior to versi…EPSS 0.28%8.2CVE-2022-29179Cilium improper privilege management vulnerabilityCilium is open source software for providing and securing network connectivity and loadbalancing between application workloads. Prior to versions 1.9…EPSS 0.36%8.1CVE-2023-41333Cilium missing authentication for critical function vulnerabilityCilium is a networking, observability, and security solution with an eBPF-based dataplane. An attacker with the ability to create or modify CiliumNet…EPSS 0.41%

Source: NIST National Vulnerability Database (record CVE-2023-27594), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.