CVE-2025-64715: Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys…

PriorityP429medium5.5CVSS 3.1

AVLACLPRLUINSUCHINAN

EPSS

0.17%

6.9th percentile

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network interface may unintentionally allow broader outbound access than intended by the policy authors. In such cases, the toCIDRset section of the derived policy is not generated, which means outbound traffic may be permitted to more destinations than originally intended. This issue has been patched in versions 1.16.17, 1.17.10, and 1.18.4. There are no workarounds for this issue.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
cilium	cilium	< 1.16.17	1.16.17
cilium	cilium	—	—
cilium	cilium	—	—
cilium	cilium	>= 1.17.0 < 1.17.10	1.17.10
cilium	cilium	>= 1.18.0 < 1.18.4	1.18.4
ciliumgithub.com	cilium_cilium	>= 1.17.0 < 1.17.10	1.17.10
github.com	cilium_cilium	>= 0 < 1.16.17	1.16.17
github.com	cilium_cilium	>= 1.17.0 < 1.17.10	1.17.10
github.com	cilium_cilium	>= 1.18.0 < 1.18.4	1.18.4

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.