CVE-2025-30163

published 2025-03-24

CVE-2025-30163: Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Node based network policies (`fromNodes` and `toNodes`) will…

Priority P4 20 medium 4.7 CVSS 3.1

AV A AC L PR N UI N S C C L I N A N

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Node based network policies (`fromNodes` and `toNodes`) will incorrectly permit traffic to/from non-node endpoints that share the labels specified in `fromNodes` and `toNodes` sections of network policies. Node based network policy is disabled by default in Cilium. This issue affects: Cilium v1.16 between v1.16.0 and v1.16.7 inclusive and v1.17 between v1.17.0 and v1.17.1 inclusive. This issue is fixed in Cilium v1.16.8 and v1.17.2. Users can work around this issue by ensuring that the labels used in `fromNodes` and `toNodes` fields are used exclusively by nodes and not by other endpoints.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
cilium	cilium	—	—
cilium	cilium	—	—
cilium	cilium	>= 1.16.0 < 1.16.8	1.16.8
cilium	cilium	>= 1.17.0 < 1.17.2	1.17.2
ciliumgithub.com	cilium_cilium	>= 1.17.0 < 1.17.2	1.17.2
github.com	cilium_cilium	>= 1.16.0 < 1.16.8	1.16.8
github.com	cilium_cilium	>= 1.17.0 < 1.17.2	1.17.2

CVSS provenance

nvd v3.1 4.7 MEDIUM CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

vendor_redhat 3.4 LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-863