Cilium's ClusterNetworkPolicy CRD conversion function silently drops 'Values' slices for 'In', 'NotIn', 'Equals', or 'NotEquals' operators in 'matchExpressions', leading to network policy enforcement failures. This allows bypassing security controls in multi-tenant clusters.
| Vendor | Product | Versions |
|---|---|---|
| cilium | clusternetworkpolicy | v1.20.0-pre, v1.20.0 |
Updated affected versions to include v1.20.0 and noted that the issue has been fixed in development.
Updated patch availability information indicating that the issue has been fixed as part of development activities.
Marked exploitAvailable and activelyExploited as true based on new information.
Initial creation
