CVE-2024-37307

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.13.0 and prior to versions 1.13.7, 1.14.12, and 1.15.6, the output of `cilium-bugtool` can contain sensitive data when the tool is run (with the `--envoy-dump` flag set) against Cilium deployments with the Envoy proxy enabled. Users of the TLS inspection, Ingress with TLS termination, Gateway API with TLS termination, and Kafka network policies with API key filtering features are affected. The sensitive data includes the CA certificate, certificate chain, and private key used by Cilium HTTP Network Policies, and when using Ingress/Gateway API and the API keys used in Kafka-related network policy. `cilium-bugtool` is a debugging tool that is typically invoked manually and does not run during the normal operation of a Cilium cluster. This issue has been patched in Cilium v1.15.6, v1.14.12, and v1.13.17. There is no workaround to this issue.

• CWE-200

• https://github.com/cilium/cilium/commit/0191b1ebcfdd61cefd06da0315a0e7d504167407Patch
• https://github.com/cilium/cilium/commit/224e288a5bf40d0bb0f16c9413693b319633431aPatch
• https://github.com/cilium/cilium/commit/9299c0fd0024e33397cffc666ff851e82af28741Patch
• https://github.com/cilium/cilium/commit/958d7b77274bf2c272d8cdfd812631d644250653Patch
• https://github.com/cilium/cilium/commit/9eb25ba40391a9b035d7e66401b862818f4aac4bPatch
• https://github.com/cilium/cilium/commit/bf9a1ae1b2d2b2c9cca329d7aa96aa4858032a61Patch
• https://github.com/cilium/cilium/security/advisories/GHSA-wh78-7948-358jVendor Advisory
• https://github.com/cilium/cilium/commit/0191b1ebcfdd61cefd06da0315a0e7d504167407Patch
• https://github.com/cilium/cilium/commit/224e288a5bf40d0bb0f16c9413693b319633431aPatch
• https://github.com/cilium/cilium/commit/9299c0fd0024e33397cffc666ff851e82af28741Patch
• https://github.com/cilium/cilium/commit/958d7b77274bf2c272d8cdfd812631d644250653Patch
• https://github.com/cilium/cilium/commit/9eb25ba40391a9b035d7e66401b862818f4aac4bPatch
• https://github.com/cilium/cilium/commit/bf9a1ae1b2d2b2c9cca329d7aa96aa4858032a61Patch
• https://github.com/cilium/cilium/security/advisories/GHSA-wh78-7948-358jVendor Advisory

Published

Jun 13, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-37301Document Merge Service is a document template merge service …7.2
• CVE-2024-37302Synapse is an open-source Matrix homeserver. Synapse version…7.5
• CVE-2024-37303Synapse is an open-source Matrix homeserver. Synapse before …5.3
• CVE-2024-37304NuGet Gallery is a package repository that powers nuget.org.…6.1
• CVE-2024-37305oqs-provider is a provider for the OpenSSL 3 cryptography li…8.2
• CVE-2024-37306Computer Vision Annotation Tool (CVAT) is an interactive vid…7.1
• CVE-2024-37308The Cooked Pro recipe plugin for WordPress is vulnerable to …5.4
• CVE-2024-37309CrateDB is a distributed SQL database. A high-risk vulnerabi…5.3
• CVE-2024-3731The Customer Reviews for WooCommerce plugin for WordPress is…6.1
• CVE-2024-37310EVerest is an EV charging software stack. An integer overflo…9
• CVE-2024-37311Collabora Online is a collaborative online office suite base…8.2
• CVE-2024-37312user_oidc app is an OpenID Connect user backend for Nextclou…6.3