CVE-2025-32793

MediumCVSS 4.0/10Last modified Jun 17, 2026

Description

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.15.0 to 1.15.15, 1.16.0 to 1.16.8, and 1.17.0 to 1.17.2, are vulnerable when using Wireguard transparent encryption in a Cilium cluster, packets that originate from a terminating endpoint can leave the source node without encryption due to a race condition in how traffic is processed by Cilium. This issue has been patched in versions 1.15.16, 1.16.9, and 1.17.3. There are no workarounds available for this issue.

Metrics

CVSS 3.1 4.0/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N

Weakness enumeration

CWE-319 CWE-362

Affected software

Vendor	Product	Versions
cilium	cilium	>= v1.13.0, < v1.15.16; >= v1.16.0, < v1.16.9; >= v1.17.0, < v1.17.3

References

https://github.com/cilium/cilium/pull/38592Patch
https://github.com/cilium/cilium/security/advisories/GHSA-5vxx-c285-pcq4Patch, Third Party Advisory

Timeline

Published: Apr 21, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-327947.6OpenEMR is a free and open source electronic health records and medical practice management application. A stored cross-site scripting (XSS)CVE-2025-327956.5Dify is an open-source LLM app development platform. Prior to version 0.6.12, a vulnerability was identified in the DIFY where normal users CVE-2025-327966.5Dify is an open-source LLM app development platform. Prior to version 0.6.12, a vulnerability was identified in the DIFY where normal users CVE-2025-327977.0Conda-build contains commands and tools to build conda packages. Prior to version 25.3.1, the write_build_scripts function in conda-build cr CVE-2025-327989.8Conda-build contains commands and tools to build conda packages. Prior to version 25.4.0, the conda-build recipe processing logic has been f CVE-2025-327999.8Conda-build contains commands and tools to build conda packages. Prior to version 25.4.0, the conda-build processing logic is vulnerable to CVE-2025-32806.5The ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin for WordPress is vulnerable to SQL Injection via the 'attribute CVE-2025-328009.8Conda-build contains commands and tools to build conda packages. Prior to version 25.3.0, the pyproject.toml lists conda-index as a Python d CVE-2025-328017.8Kea configuration and API directives can be used to load a malicious hook library. Many common configurations run Kea as root, leave the AP CVE-2025-328026.1Kea configuration and API directives can be used to overwrite arbitrary files, subject to permissions granted to Kea. Many common configura CVE-2025-328034.0In some cases, Kea log files or lease files may be world-readable. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2,CVE-2025-328075.3A path traversal vulnerability in FusionDirectory before 1.5 allows remote attackers to read arbitrary files on the host that end with .png