Description
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.17.15, 1.18.9, and 1.19.3, the output of cilium-bugtool can contain sensitive data when the tool is run against Cilium deployments with WireGuard encryption enabled. This issue has been patched in versions 1.17.15, 1.18.9, and 1.19.3.
Affected products
cilium: cilium
References4
- github.com/cilium/cilium/security/advisories/GHSA-gj49-89wh-h4gj MitigationVendor Advisory
- github.com/cilium/cilium/releases/tag/v1.17.15 ProductRelease Notes
- github.com/cilium/cilium/releases/tag/v1.18.9 ProductRelease Notes
- github.com/cilium/cilium/releases/tag/v1.19.3 ProductRelease Notes
Metrics
- CVSS 3.1
-
4.4
MEDIUM
Score source: NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N - EPSS — exploit probability
- 0% percentile: 0 · as of 13 November 2026
- CWE
- CWE-200CWE-312
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.