{"id":"GO-2025-4167","revision":"1a8af91152d84ba3b23b6c788c3a5840","records":[{"revision":"1a8af91152d84ba3b23b6c788c3a5840","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4167","aliases":["BIT-cilium-2025-64715","BIT-cilium-operator-2025-64715","BIT-hubble-relay-2025-64715","CVE-2025-64715","GHSA-38pp-6gcp-rqvm"],"title":"Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic in Ciliumgithub.com/cilium/cilium","description":"Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic in Ciliumgithub.com/cilium/cilium","state":0,"publishedAt":"2025-12-15T20:33:49+00:00","modifiedAt":"2026-02-04T03:22:00.049612+00:00","affected":[{"ecosystem":"Go","name":"github.com/cilium/cilium","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.16.17"},{"kind":"introduced","version":"1.17.0"},{"kind":"fixed","version":"1.17.10"},{"kind":"introduced","version":"1.18.0"},{"kind":"fixed","version":"1.18.4"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/cilium/cilium/security/advisories/GHSA-38pp-6gcp-rqvm","https://nvd.nist.gov/vuln/detail/CVE-2025-64715","https://github.com/cilium/cilium/commit/a385856b59c8289cc7273fa3a3062bbf0ef96c97","https://github.com/cilium/cilium/releases/tag/v1.16.17","https://github.com/cilium/cilium/releases/tag/v1.17.10","https://github.com/cilium/cilium/releases/tag/v1.18.4"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4167","license":"OSV · upstream source license applies","key":"osv:GO-2025-4167","identifiers":["GO-2025-4167","BIT-cilium-2025-64715","BIT-cilium-operator-2025-64715","BIT-hubble-relay-2025-64715","CVE-2025-64715","GHSA-38pp-6gcp-rqvm"]},"retained":false,"historicalAffected":[]}],"coverage":[]}