{"uuid": "cce2d405-fc94-4e37-8183-a0829b4cc879", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-5VXX-C285-PCQ4", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12686", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-32793\n\ud83d\udd25 CVSS Score: 4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N)\n\ud83d\udd39 Description: Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.15.0 to 1.15.15, 1.16.0 to 1.16.8, and 1.17.0 to 1.17.2, are vulnerable when using Wireguard transparent encryption in a Cilium cluster, packets that originate from a terminating endpoint can leave the source node without encryption due to a race condition in how traffic is processed by Cilium. This issue has been patched in versions 1.15.16, 1.16.9, and 1.17.3. There are no workarounds available for this issue.\n\ud83d\udccf Published: 2025-04-21T15:34:14.315Z\n\ud83d\udccf Modified: 2025-04-21T15:48:55.214Z\n\ud83d\udd17 References:\n1. https://github.com/cilium/cilium/security/advisories/GHSA-5vxx-c285-pcq4\n2. https://github.com/cilium/cilium/pull/38592", "creation_timestamp": "2025-04-21T16:02:51.000000Z"}