CVE-2026-26963: Cilium may not enforce host firewall policies when Native Routing, WireGuard and Node Encryption are enabled

(updated )

Host Policies will incorrectly permit traffic from Pods on other nodes when all of the following configurations are enabled:

These options are disabled by default in Cilium.

References

Code Behaviors & Features

Detect and mitigate CVE-2026-26963 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →