PatchSiren

cilium CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH cilium CVE published 2026-05-08

CVE-2026-41520

Cilium's diagnostic utility, cilium-bugtool, inadvertently captures sensitive cryptographic material when WireGuard encryption is active. The tool is designed to collect system state for troubleshooting, but prior to the patched versions, it failed to redact WireGuard private keys from its output. Because bugtool archives are frequently shared with vendors or posted to public issue trackers, this creates [truncated]