Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces
Cilium is a networking, observability, and security solution. Prior to 1.17.17, 1.18.11, and 1.19.5, Cilium clusters using Gateway API allow users with permissions to create or update namespaced HTTPRoutes to mirror HTTP traffic to any Service in any namespace, bypassing the ReferenceGrant authorization mechanism. Gateway API functionality is disabled by default. This issue is fixed in versions 1.17.17, 1.18.11, and 1.19.5.
BIT-cilium-2026-56742
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:BIT-cilium-2026-56742
cilium
Source reference: /affected/0/package/name
- Affected versions
- Not stated in this record
- Fixed versions
- 1.17.17
Source reference:
/affected/0/ranges1.18.11Source reference:
/affected/0/ranges1.19.5Source reference:
/affected/0/ranges - Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"type": "SEMVER",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.17.17"
},
{
"introduced": "1.18.0"
},
{
"fixed": "1.18.11"
},
{
"introduced": "1.19.0"
},
{
"fixed": "1.19.5"
}
]
}
],
"package": {
"name": "cilium",
"purl": "pkg:bitnami/cilium",
"ecosystem": "Bitnami"
},
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L"
}
],
"database_specific": {
"source": "https://github.com/bitnami/vulndb/tree/main/data/cilium/BIT-cilium-2026-56742.json"
}
}
]- Related CVEs
- CVE-2026-56742
Source reference:
/aliases
Publisher severity
high
Source reference: /database_specific/severity
- Event
- #63954 · Revision 1
- Added to Heist Feed
- Publisher date