CVE-2025-32793

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.15.0 to 1.15.15, 1.16.0 to 1.16.8, and 1.17.0 to 1.17.2, are vulnerable when using Wireguard transparent encryption in a Cilium cluster, packets that originate from a terminating endpoint can leave the source node without encryption due to a race condition in how traffic is processed by Cilium. This issue has been patched in versions 1.15.16, 1.16.9, and 1.17.3. There are no workarounds available for this issue.
CVSS

No CVSS.

Configurations

No configuration.

History

21 Apr 2025, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-04-21 16:15

Updated : 2025-04-21 16:15


NVD link : CVE-2025-32793

Mitre link : CVE-2025-32793


JSON object : View

Products Affected

No product.

CWE
CWE-319

Cleartext Transmission of Sensitive Information