CVE-2025-48056

Hubble is a fully distributed networking and security observability platform for cloud native workloads. Prior to version 1.17.2, a network attacker could inject malicious control characters into Hubble CLI terminal output, potentially leading to loss of integrity and manipulation of the output. This could be leveraged to conceal log entries, rewrite output, or even make the terminal temporarily unusable. Exploitation of this attack would require the victim to be monitoring Kafka traffic using Layer 7 Protocol Visibility at the time of the attack. The issue is patched in Hubble CLI v1.17.2. Hubble CLI users who are unable to upgrade can direct their Hubble flows to a log file and inspect the output within a text editor.

• CWE-74

• https://github.com/cilium/cilium/pull/37401
• https://github.com/cilium/hubble/security/advisories/GHSA-274q-79q9-52j7

Published

May 20, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-4805A stored cross-site scripting (XSS) vulnerability exists in …4.8
• CVE-2025-48050In DOMPurify through 3.2.5 before 6bc6d60, scripts/server.js…7.5
• CVE-2025-48051powertip.ts in Lila (for Lichess) before ab0beaf allows XSS …6.1
• CVE-2025-48053Discourse is an open-source discussion platform. Prior to ve…7.5
• CVE-2025-48054Radashi is a TypeScript utility toolkit. Prior to version 12…6.8
• CVE-2025-48055Combodo iTop is a web based IT service management tool. In v…5.4
• CVE-2025-48057Icinga 2 is a monitoring system which checks the availabilit…9.8
• CVE-2025-48058PowSyBl (Power System Blocks) is a framework to build power …6.3
• CVE-2025-48059PowSyBl (Power System Blocks) is a framework to build power …2.7
• CVE-2025-4806A vulnerability, which was classified as critical, has been …8.8
• CVE-2025-48060jq is a command-line JSON processor. In versions up to and i…7.5
• CVE-2025-48061wire-webapp is the web application for the open-source messa…5.6