https://seclists.org/oss-sec/2026/q3/88: [CVE quest] Cilium ClusterNetworkPolicy matchExpssions Values silently dropped — 0-day in v1.20.0-pleases, no maintainer sponse in 9 days via GHSA Triage

Q: Are stable Cilium deployments affected?

No. The affected functionality was an alpha feature under development, and the issue was fixed before it became part of a stable release.

Q: What is known about the validity of the report?

The report correctly identified both the commit and pull request that introduced the bug and the commit and pull request that fixed it. Cilium states that it had already identified and fixed the issue during development.

Published Jul 7, 2026

Updated

Affected Software

1 affected component

Cilium Cilium>=1.20.0-pleases<

Frequently Asked Questions

Are stable Cilium deployments affected?

No. The affected functionality was an alpha feature under development, and the issue was fixed before it became part of a stable release.

What is known about the validity of the report?

The report correctly identified both the commit and pull request that introduced the bug and the commit and pull request that fixed it. Cilium states that it had already identified and fixed the issue during development.

https://seclists.org/oss-sec/2026/q3/88: [CVE quest] Cilium ClusterNetworkPolicy matchExpssions Values silently dropped — 0-day in v1.20.0-pleases, no maintainer sponse in 9 days via GHSA Triage

Affected Software

Frequently Asked Questions

Are stable Cilium deployments affected?

What is known about the validity of the report?

Company

Resources

Contact