CVE-2025-30163

Description

Cilium node based network policies may incorrectly allow workload traffic in github.com/cilium/cilium

Affected packages (6)

• Bitnami/cilium>= 1.16.0, < 1.17.2
• Bitnami/cilium-operator>= 1.16.0, < 1.17.2
• Bitnami/hubble-relay>= 1.16.0, < 1.17.2
• Go/Ciliumgithub.com/cilium/cilium>= 1.17.0, < 1.17.2
• Go/github.com/cilium/cilium>= 1.16.0, < 1.16.8
• Go/github.com/cilium/cilium>= 1.16.0, < 1.16.8, >= 1.17.0, < 1.17.2

CVSS scores

References (5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-30163
• PATCHhttps://github.com/cilium/cilium
• WEBhttps://docs.cilium.io/en/stable/security/policy/language/#node-based
• WEBhttps://github.com/cilium/cilium/pull/36657
• WEBhttps://github.com/cilium/cilium/security/advisories/GHSA-c6pf-2v8j-96mc