Ciliumgithub.Com Cilium Cilium vulnerabilities

CVE-2025-64715 [MEDIUM] CWE-284 Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic ### Impact `CiliumNetworkPolicy`s which use `egress.toGroups.aws.securityGroupsIds` to reference AWS security group IDs that do not exist or are not attached to any network interface may unintentionally allow broader outbound access than intended by the policy authors. In such cases, the toC

CVE-2025-30163 [LOW] CWE-863 Cilium node based network policies may incorrectly allow workload traffic Cilium node based network policies may incorrectly allow workload traffic ### Impact [Node based network policies](https://docs.cilium.io/en/stable/security/policy/language/#node-based) (`fromNodes` and `toNodes`) will incorrectly permit traffic to/from non-node endpoints that share the labels specified in `fromNodes` and `toNodes` sections of network policies. Node based network policy is di