Description
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.17.15, 1.18.9, and 1.19.3, the output of cilium-bugtool can contain sensitive data when the tool is run against Cilium deployments with WireGuard encryption enabled. This issue has been patched in versions 1.17.15, 1.18.9, and 1.19.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| cilium | cilium | < 1.17.15, >= 1.18.0, < 1.18.9, >= 1.19.0, < 1.19.3 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 16.0 | govulncheck-vulndb | 0.0.20260723T184607-160000.1.1 | openSUSE-SU-2026:21483-1 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | hubble-ui-backend | 0.13.5-r1 | — |
| Wolfi rolling | kubescape | 4.0.5-r3 | — |
| Wolfi rolling | kubescape-operator | 0.2.140-r1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/cilium/cilium | < 1.17.15 | 1.17.15 | GHSA-gj49-89wh-h4gj |
| Go | github.com/cilium/cilium | >= 1.18.0, < 1.18.9 | 1.18.9 | GHSA-gj49-89wh-h4gj |
| Go | github.com/cilium/cilium | >= 1.19.0, < 1.19.3 | 1.19.3 | GHSA-gj49-89wh-h4gj |
| Go | github.com/cilium/cilium | < 1.17.15 · >= 1.18.0, < 1.18.9 · >= 1.19.0, < 1.19.3 | 1.17.15, 1.18.9, 1.19.3 | GO-2026-5400 |
Advisories 1
- openSUSE-SU-2026:21483-1 Security update for govulncheck-vulndb SUSE / openSUSE Security Updates · Jul 31, 2026