Database/Container, Kubernetes & orchestration
Cilium: With L7 enabled, the embedded Envoy exposes a world-accessible admin.sock on the cluster
CVE-2026-49445Container, Kubernetes & orchestrationcurated
Impact
With L7 enabled, the embedded Envoy exposes a world-accessible admin.sock on the cluster; full dataplane control
Who can reach it
Any pod on the cluster network
What to do
Emergency rolling Cilium upgrade; no GPU drain but expect brief dataplane blips per node
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.