Database/Container, Kubernetes & orchestration
Cilium: A namespaced HTTPRoute can mirror another tenant's HTTP traffic
CVE-2026-56742Container, Kubernetes & orchestrationcurated
Impact
A namespaced HTTPRoute can mirror another tenant's HTTP traffic; cross-tenant data exfiltration
Who can reach it
Cluster user with namespace access and Gateway API rights
What to do
Rolling Cilium upgrade; restrict HTTPRoute mirroring
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.