CVE-2025-64715

Name of the Vulnerable Software and Affected Versions Cilium versions prior to 1.16.17 Cilium versions prior to 1.17.10 Cilium versions prior to 1.18.4

Description Cilium is a networking, observability, and security solution with an eBPF-based dataplane. CiliumNetworkPolicys utilizing egress.toGroups.aws.securityGroupsIds referencing non-existent or unattached AWS security group IDs may unintentionally permit wider outbound access than intended. Specifically, the toCIDRset section of the resulting policy is not generated, potentially allowing traffic to more destinations than originally configured.

Recommendations Update to Cilium version 1.16.17 or later. Update to Cilium version 1.17.10 or later. Update to Cilium version 1.18.4 or later.