VulnSocial

CVE-2026-122266

LOWCVSS 6.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS Network Policy Agent before 1.3.7 (VPC CNI before 1.22.3) might allow an authenticated adjacent user to bypass NetworkPolicy ingress enforcement on co-located pods via eBPF conntrack map poisoning using crafted AF_PACKET frames. To remediate this issue, users should upgrade to Amazon VPC CNI Managed Add-on v1.22.3 or later (which includes Network Policy Agent v1.3.7).

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-1189

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Peaked 1d ago at 1 mentions (2026-11-04); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-11-04: 1Mentions · 2026-11-05: 111-0411-05
Referenced assets1 URL
By indicator
Full discourse2 posts
  • Ice@icelimit3d

    ไล่ describe-addon vpc-cni ทุก cluster แต่เช้าว่ะ 555 AWS ออก bulletin 2026-170-AWS ลง CVE-2026-122266 ใน EKS Network Policy Agent ผู้ใช้ที่ authenticated และอยู่ network เดียวกันอาจลอด NetworkPolicy ingress ของ pod บน node เดียวกันได้ กระทบ agent ต่ำกว่า 1.3.7 และ VPC CNI add-on ต่ำกว่า 1.22.3 ไม่มี workaround ต้องอัปเดต #EKS #Kubernetes #CloudSecurity

    2000068
    159 followersView on X
  • CVE@CVEnew

    CVE-2026-122266 Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS Network Policy Agent before 1.3.7 (VPC CNI before 1.22.3) might allow an authentica… https://www.cve.org/CVERecord?id=CVE-2026-122266

    00001506
    58.7K followersView on X

Explore more

Back to dashboard