-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/cilium/cilium | go | ||
| Ciliumgithub.com/cilium/cilium | go |
Miggo AIRoot Cause AnalysisThe vulnerability stems from node-based policies matching any endpoint with specified labels, not just nodes. The fix in PR #36657 explicitly adds a 'reserved:remote-node' matchExpression to node selector logic. The affected functions handling policy rule generation in utils.go were missing this critical label requirement in vulnerable versions, allowing unintended matches. The commit diff shows these functions were modified to add the node identity validation.
GoGoOngoing coverage of React2Shell