CVE-2026-122266mediumCWE-1189

CVE-2026-122266: falha de média gravidade em aws-network-policy-agent

Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar amazon-vpc-cni-k8s+ Monitorar aws-network-policy-agent

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.3epss 0.3%
Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS Network Policy Agent before 1.3.7 (VPC CNI before 1.22.3) might allow an authenticated adjacent user to bypass NetworkPolicy ingress enforcement on co-located pods via eBPF conntrack map poisoning using crafted AF_PACKET frames. To remediate this issue, users should upgrade to Amazon VPC CNI Managed Add-on v1.22.3 or later (which includes Network Policy Agent v1.3.7).
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N
Produtos afetados
AWS · amazon-vpc-cni-k8sAWS · aws-network-policy-agent
CVEs relacionadas — aws-network-policy-agent

No mesmo produto, das mais perigosas para as menos.

CVE-2026-86831HIGHImproper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKSEPSS 0.6%