CVE-2025-30163

A flaw was found in Cilium package. The Node based network policies (fromNodes and toNodes) will incorrectly permit traffic to/from non-node endpoints that share the labels specified in fromNodes and toNodes sections of network policies.

The vulnerability affects Cilium's node-based network policies (fromNodes and toNodes). The Attack Complexity is set to High (AC:H) because node-based network policy is disabled by default in Cilium. For an attack to succeed, an administrator must first explicitly enable this non-default feature, and the environment must have non-node endpoints sharing specific labels with nodes. Hence, Red Hat rated this vulnerability as Low impact.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Users can work around this issue by ensuring that the labels used in fromNodes and toNodes fields are used exclusively by nodes and not by other endpoints.