CVE-2025-30162

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. For Cilium users who use Gateway API for Ingress for some services and use LB-IPAM or BGP for LB Service implementation and use network policies to block egress traffic from workloads in a namespace to workloads in other namespaces, egress traffic from workloads covered by such network policies to LoadBalancers configured by `Gateway` resources will incorrectly be allowed. LoadBalancer resources not deployed via a Gateway API configuration are not affected by this issue. This issue affects: Cilium v1.15 between v1.15.0 and v1.15.14 inclusive, v1.16 between v1.16.0 and v1.16.7 inclusive, and v1.17 between v1.17.0 and v1.17.1 inclusive. This issue is fixed in Cilium v1.15.15, v1.16.8, and v1.17.2. A Clusterwide Cilium Network Policy can be used to work around this issue for users who are unable to upgrade.

• CWE-863

• https://docs.cilium.io/en/stable/network/lb-ipamProduct
• https://github.com/cilium/cilium/security/advisories/GHSA-24qp-4xx8-3jvjMitigation, Patch, Third Party Advisory
• https://github.com/cilium/proxy/pull/1172Patch

Published

Mar 24, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-30157Envoy is a cloud-native high-performance edge/middle/service…7.5
• CVE-2025-30158NamelessMC is a free, easy to use & powerful website softwar…7.1
• CVE-2025-30159Kirby is an open-source content management system. A vulnera…9.1
• CVE-2025-3016A vulnerability classified as problematic was found in Open …6.5
• CVE-2025-30160Redlib is an alternative private front-end to Reddit. A vuln…7.5
• CVE-2025-30161OpenEMR is a free and open source electronic health records …5.4
• CVE-2025-30163Cilium is a networking, observability, and security solution…4.7
• CVE-2025-30164Icinga Web 2 is an open source monitoring web interface, fra…6.1
• CVE-2025-30165vLLM is an inference and serving engine for large language m…8
• CVE-2025-30166Pimcore's Admin Classic Bundle provides a Backend UI for Pim…4.8
• CVE-2025-30167Jupyter Core is a package for the core common functionality …7.3
• CVE-2025-30168Parse Server is an open source backend that can be deployed …6.9