CVE-2025-32793
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.15.0 to 1.15.15, 1.16.0 to 1.16.8, and 1.17.0 to 1.17.2, are vulnerable when using Wireguard transparent encryption in a Cilium cluster, packets that originate from a terminating endpoint can leave the source node without encryption due to a race condition in how traffic is processed by Cilium. This issue has been patched in versions 1.15.16, 1.16.9, and 1.17.3. There are no workarounds available for this issue.
| Software | From | Fixed in |
|---|---|---|
github.com/cilium/cilium
|
1.13.0 | 1.15.16 |
|
github.com/cilium/cilium
|
1.16.0 | 1.16.9 |
|
github.com/cilium/cilium
|
1.17.0 | 1.17.3 |
| cilium / cilium | 1.13.0 | 1.15.16 |
| cilium / cilium | 1.16.0 | 1.16.9 |
| cilium / cilium | 1.17.0 | 1.17.3 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime