CVE-2026-53935— CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-53935
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation
Source: NVD (National Vulnerability Database)
Vulnerability Description
Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, enabling hijacking traffic to Services in any namespace and bypassing namespace scoping enforced by serviceMatcher; deleting such a policy can also corrupt Cilium internal service state and stop service translation for the affected Service. This issue is fixed in versions 1.17.16, 1.18.10, and 1.19.4.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
授权机制不正确
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cilium 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cilium是Cilium组织开源的一个开源软件。用于提供和透明地保护应用程序工作负载(如应用程序容器或进程)之间的网络连接和负载平衡。 Cilium 1.17.16之前版本、1.18.2到1.18.9版本和1.19.0到1.19.3版本存在授权问题漏洞，该漏洞源于授权问题，用户通过创建CiliumLocalRedirectPolicies可指定任意ClusterIP，导致劫持任何命名空间中的服务流量并绕过serviceMatcher强制执行的命名空间范围，同时删除此类策略可能破坏Cilium内部服务状态
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-53935
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-53935
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-53935 (4)
Vendor Advisories for CVE-2026-53935 (1)
IV. Related Vulnerabilities
Same product: cilium
- CVE-2026-41520
Cillium exposes sensitive information included in the cilium - CVE-2026-33726
Cilium L7 proxy may bypass Kubernetes NetworkPolicy for same - CVE-2026-26963
Cilium may not enforce host firewall policies when Native Ro - CVE-2025-64715
Cilium with misconfigured toGroups in policies can lead to u - CVE-2025-32793
Cilium packets from terminating endpoints may not be encrypt
Same vendor: cilium
- CVE-2026-10722
cilium ebpf LoadCollectionSpec/LoadCollectionSpecFromReader - CVE-2026-41520
Cillium exposes sensitive information included in the cilium - CVE-2026-33726
Cilium L7 proxy may bypass Kubernetes NetworkPolicy for same - CVE-2026-26963
Cilium may not enforce host firewall policies when Native Ro - CVE-2025-64715
Cilium with misconfigured toGroups in policies can lead to u
Same weakness: CWE-863
- CVE-2026-1359
Genolve – AI image AI video generation <= 5.0.5 - Authentica - CVE-2026-13238
Commerce Realex / Global Payments - Moderately critical - Ac - CVE-2026-13237
AI Agents - Moderately critical - Information disclosure, Ac - CVE-2026-13232
Advanced Content Feedback (aka admin_feedback) - Moderately - CVE-2026-57217
RabbitMQ: Topic authorization can lead to cross-tenant routi
V. Comments for CVE-2026-53935
No comments yet