Detections
Analytics
SCA: security update for github.com/cilium/cilium (GHSA-5vxx-c285-pcq4)
medium Tenable Cloud Security Plugin ID 434610
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.15.0
to 1.15.15, 1.16.0 to 1.16.8, and 1.17.0 to 1.17.2, are vulnerable when using Wireguard transparent
encryption in a Cilium cluster, packets that originate from a terminating endpoint can leave the source
node without encryption due to a race condition in how traffic is processed by Cilium. This issue has been
patched in versions 1.15.16, 1.16.9, and 1.17.3. There are no workarounds available for this issue.
(CVE-2025-32793)
See Also
Plugin Details
Severity: Medium
ID: 434610
Version: Revision 1.7
Type: Local
Family: SCA Checks
Published: 8/19/2025
Updated: 7/2/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Low
Score: 1.2
Percentile: 0.01
Vendor
Vendor Severity: Medium
CVSS v2
Risk Factor: Low
Base Score: 2.6
Temporal Score: 1.9
Vector: CVSS2#AV:N/AC:H/Au:N/C:P/I:N/A:N
CVSS Score Source: CVE-2025-32793
CVSS v3
Risk Factor: Medium
Base Score: 4
Temporal Score: 3.5
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 4/21/2025
Vulnerability Publication Date: 4/21/2025
Reference Information
CVE: CVE-2025-32793