-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
GoGoMiggo AIRoot Cause AnalysisThe vulnerability stems from excessive Kubernetes RBAC permissions in ClusterRole definitions, not from specific code functions. The patches show YAML manifest changes removing 'nodes' and 'pods' write permissions from Cilium's ClusterRoles. While the vulnerability could be exploited through Kubernetes API calls to modify Pod/Node resources, there are no Go source code changes in the provided patches that would indicate specific vulnerable functions in the Cilium codebase. The security fix was purely configuration-level (RBAC rules), not code logic changes. Runtime detection would focus on Kubernetes API audit logs rather than application-level function profiling.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/cilium/cilium | go | >= 1.11.0, < 1.11.5 | 1.11.5 |
| github.com/cilium/cilium | go | >= 1.10.0, < 1.10.11 | 1.10.11 |
| github.com/cilium/cilium | go | < 1.9.16 | 1.9.16 |
Ongoing coverage of React2Shell