CVE-2025-30162

Description

Cilium East-west traffic not subject to egress policy enforcement for requests via Gateway API load balancers in github.com/cilium/cilium

Affected packages (5)

• Bitnami/cilium>= 1.15.0, < 1.17.2
• Bitnami/cilium-operator>= 1.15.0, < 1.17.2
• Bitnami/hubble-relay>= 1.15.0, < 1.17.2
• Go/github.com/cilium/cilium>= 1.16.0, < 1.16.8
• Go/github.com/cilium/cilium>= 1.15.0, < 1.15.15, >= 1.16.0, < 1.16.8, >= 1.17.0, < 1.17.2

CVSS scores

References (5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-30162
• PATCHhttps://github.com/cilium/cilium
• WEBhttps://docs.cilium.io/en/stable/network/lb-ipam
• WEBhttps://github.com/cilium/cilium/security/advisories/GHSA-24qp-4xx8-3jvj
• WEBhttps://github.com/cilium/proxy/pull/1172