← Vulnerability feed

Vulnerability record · CVE-2023-27595 · published 17 March 2023

CVE-2023-27595: Cilium vulnerability

Cilium · Cilium

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In version 1.13.0, when Cilium is started, there is a short period when Cilium eBPF programs are not attached to the host. During this period, the host does not implement any of Cilium's featureset. This can cause disruption to newly established connections during this period due to the lack of Load Balancing, or can cause Network Policy bypass due to the lack of Network Policy enforcement during the window. This vulnerability impacts any Cilium-managed endpoints on the node (such as Kubernetes Pods), as well as the host network namespace (including Host Firewall). This vulnerability is fixed in Cilium 1.13.1 or later. Cilium releases 1.12.x, 1.11.x, and earlier are not affected. There are no known workarounds.

9.8 CVSS 3.1 Critical EPSS 0.73% · top 47.5% CWE-755 · CWE-755
9.8CVSS 3.1 base score
0.73%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In version 1.13.0, when Cilium is started, there is a short period when Cilium eBPF programs are not attached to the host. During this period, the host does not implement any of Cilium's featureset. This can cause disruption to newly established connections during this period due to the lack of Load Balancing, or can cause Network Policy bypass due to the lack of Network Policy enforcement during the window. This vulnerability impacts any Cilium-managed endpoints on the node (such as Kubernetes Pods), as well as the host network namespace (including Host Firewall). This vulnerability is fixed in Cilium 1.13.1 or later. Cilium releases 1.12.x, 1.11.x, and earlier are not affected. There are no known workarounds.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/cilium/cilium/pull/24336 Third Party Advisory
https://github.com/cilium/cilium/releases/tag/v1.13.1 Third Party Advisory
https://github.com/cilium/cilium/security/advisories/GHSA-r5x6-w42p-jhpp Third Party Advisory
https://github.com/cilium/cilium/pull/24336 Third Party Advisory
https://github.com/cilium/cilium/releases/tag/v1.13.1 Third Party Advisory
https://github.com/cilium/cilium/security/advisories/GHSA-r5x6-w42p-jhpp Third Party Advisory

Track CVE-2023-27595 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.0CVE-2023-39347Cilium insufficient verification of data authenticity vulnerabilityCilium is a networking, observability, and security solution with an eBPF-based dataplane. An attacker with the ability to update pod labels can caus…EPSS 0.50%8.9CVE-2026-56742Cilium missing authorization vulnerabilityCilium is a networking, observability, and security solution. Prior to 1.17.17, 1.18.11, and 1.19.5, Cilium clusters using Gateway API allow users wi…EPSS 0.17%8.8CVE-2026-49445Cilium incorrect permission assignment vulnerabilityCilium is a networking, observability, and security solution. Prior to 1.17.14, 1.18.8, and 1.19.2, when Cilium L7 functionality is enabled, the embe…EPSS 0.17%8.7CVE-2024-47825Cilium incorrect default permissions vulnerabilityCilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.14.0 and prior to versions 1.14.16 a…EPSS 0.40%8.2CVE-2022-29178Cilium incorrect default permissions vulnerabilityCilium is open source software for providing and securing network connectivity and loadbalancing between application workloads. Cilium prior to versi…EPSS 0.28%8.2CVE-2022-29179Cilium improper privilege management vulnerabilityCilium is open source software for providing and securing network connectivity and loadbalancing between application workloads. Prior to versions 1.9…EPSS 0.36%8.1CVE-2023-41333Cilium missing authentication for critical function vulnerabilityCilium is a networking, observability, and security solution with an eBPF-based dataplane. An attacker with the ability to create or modify CiliumNet…EPSS 0.41%7.3CVE-2023-27594Cilium improper authorization vulnerabilityCilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.11.15, 1.12.8, and 1.13.1, under speci…EPSS 0.55%

Source: NIST National Vulnerability Database (record CVE-2023-27595), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.