CVE-2023-27595

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In version 1.13.0, when Cilium is started, there is a short period when Cilium eBPF programs are not attached to the host. During this period, the host does not implement any of Cilium's featureset. This can cause disruption to newly established connections during this period due to the lack of Load Balancing, or can cause Network Policy bypass due to the lack of Network Policy enforcement during the window. This vulnerability impacts any Cilium-managed endpoints on the node (such as Kubernetes Pods), as well as the host network namespace (including Host Firewall). This vulnerability is fixed in Cilium 1.13.1 or later. Cilium releases 1.12.x, 1.11.x, and earlier are not affected. There are no known workarounds.

• CWE-755

• https://github.com/cilium/cilium/pull/24336Third Party Advisory
• https://github.com/cilium/cilium/releases/tag/v1.13.1Third Party Advisory
• https://github.com/cilium/cilium/security/advisories/GHSA-r5x6-w42p-jhppThird Party Advisory
• https://github.com/cilium/cilium/pull/24336Third Party Advisory
• https://github.com/cilium/cilium/releases/tag/v1.13.1Third Party Advisory
• https://github.com/cilium/cilium/security/advisories/GHSA-r5x6-w42p-jhppThird Party Advisory

Published

Mar 17, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-2759A hidden API exists in TapHome's core platform before versio…8.8
• CVE-2023-27590Rizin is a UNIX-like reverse engineering framework and comma…7.8
• CVE-2023-27591Miniflux is a feed reader. Prior to version 2.0.43, an unaut…7.5
• CVE-2023-27592Miniflux is a feed reader. Since v2.0.25, Miniflux will auto…5.4
• CVE-2023-27593Cilium is a networking, observability, and security solution…5.5
• CVE-2023-27594Cilium is a networking, observability, and security solution…7.3
• CVE-2023-27596OpenSIPS is a Session Initiation Protocol (SIP) server imple…7.5
• CVE-2023-27597OpenSIPS is a Session Initiation Protocol (SIP) server imple…7.5
• CVE-2023-27598OpenSIPS is a Session Initiation Protocol (SIP) server imple…7.5
• CVE-2023-27599OpenSIPS is a Session Initiation Protocol (SIP) server imple…7.5
• CVE-2023-2760An SQL injection vulnerability exists in TapHome core Handle…7.6
• CVE-2023-27600OpenSIPS is a Session Initiation Protocol (SIP) server imple…7.5