CVE-2024-25630

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. For Cilium users who are using CRDs to store Cilium state (the default configuration) and Wireguard transparent encryption, traffic to/from the Ingress and health endpoints is not encrypted. This issue affects Cilium v1.14 before v1.14.7 and has been patched in Cilium v1.14.7. There is no workaround to this issue.

• CWE-311
• CWE-319

• https://docs.cilium.io/en/stable/security/network/encryption-wireguard/#encryption-wgProduct
• https://github.com/cilium/cilium/releases/tag/v1.14.7Release Notes
• https://github.com/cilium/cilium/security/advisories/GHSA-7496-fgv9-xw82Vendor Advisory
• https://docs.cilium.io/en/stable/security/network/encryption-wireguard/#encryption-wgProduct
• https://github.com/cilium/cilium/releases/tag/v1.14.7Release Notes
• https://github.com/cilium/cilium/security/advisories/GHSA-7496-fgv9-xw82Vendor Advisory

Published

Feb 20, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-25625Pimcore's Admin Classic Bundle provides a Backend UI for Pim…9.3
• CVE-2024-25626Yocto Project is an open source collaboration project that h…9.8
• CVE-2024-25627Alf.io is a free and open source event attendance management…4.8
• CVE-2024-25628Alf.io is a free and open source event attendance management…7.6
• CVE-2024-25629c-ares is a C library for asynchronous DNS requests. `ares__…5.5
• CVE-2024-2563A vulnerability has been found in PandaXGO PandaX up to 2024…9.8
• CVE-2024-25631Cilium is a networking, observability, and security solution…5.3
• CVE-2024-25632eLabFTW is an open source electronic lab notebook for resear…8.8
• CVE-2024-25633eLabFTW is an open source electronic lab notebook for resear…5.4
• CVE-2024-25634alf.io is an open source ticket reservation system. Prior to…6.5
• CVE-2024-25635alf.io is an open source ticket reservation system. Prior to…8.8
• CVE-2024-25636Misskey is an open source, decentralized social media platfo…8.8