CVE-2026-41520
Fixed in a distro release EPSS <1%CVSS 7.9
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.17.15, 1.18.9, and 1.19.3, the output of cilium-bugtool can contain sensitive data when the tool is run against Cilium deployments with WireGuard encryption enabled. This issue has been patched in versions 1.17.15, 1.18.9, and 1.19.3.
Products: cilium
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/cilium/cilium | 1.17.15 |
| Go | github.com/cilium/cilium | 1.18.9 |
| Go | github.com/cilium/cilium | 1.19.3 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | cilium-1.16 | no fix |
| Chainguard | cilium-1.16-clustermesh-apiserver | no fix |
| Chainguard | cilium-1.16-hubble-relay | no fix |
| Chainguard | cilium-1.16-operator-aws | no fix |
| Chainguard | cilium-1.16-operator-generic | no fix |
| Chainguard | cilium-fips-1.16 | no fix |
| Chainguard | cilium-fips-1.16-clustermesh-apiserver | no fix |
| Chainguard | cilium-fips-1.16-host-utils | no fix |
| Chainguard | cilium-fips-1.16-hubble-relay | no fix |
| Chainguard | cilium-fips-1.16-operator-aws | no fix |
| Chainguard | cilium-fips-1.16-operator-azure | no fix |
| Chainguard | cilium-fips-1.16-operator-generic | no fix |
| Chainguard | hubble-fips | 1.18.6-r7 |
| Chainguard | hubble-ui-backend | 0.13.5-r1 |
| Chainguard | hubble-ui-backend-fips | 0.13.5-r1 |
| Chainguard | kubescape | 4.0.5-r3 |
| Chainguard | kubescape-operator | 0.2.140-r1 |
| Chainguard | kubescape-operator-fips | 0.2.140-r1 |
| Chainguard | kubescape-server | 4.0.9-r0 |
| Chainguard | kubescape-server-downloader | 4.0.9-r0 |
| Chainguard | kubescape-server-fips | 4.0.6-r1 |
| Chainguard | kubescape-server-fips-downloader | 4.0.6-r1 |
| Wolfi | hubble-ui-backend | 0.13.5-r1 |
| Wolfi | kubescape | 4.0.5-r3 |
| Wolfi | kubescape-operator | 0.2.140-r1 |
| openSUSE Leap 16.0 | govulncheck-vulndb | 0.0.20260723T184607-160000.1.1 |