kube-router: BGP Peer Passwords Exposed in Logs at Verbose Logging Level in github.com/cloudnativelabs/kube-router

Description

References

• cloudnativelabs/kube-router security advisory · ADVISORY

More vulnerabilities in github.com/cloudnativelabs/kube-router

• GO-2026-5653kube-router: GoBGP gRPC Admin Port Exposed on Node Primary IP Without Authentication, Allowing Cluster-Wide BGP Route Injection in github.co…
• GHSA-v5mh-h5hx-7v92MEDIUM 6.3kube-router: GoBGP gRPC Admin Port Exposed on Node Primary IP Without Authentication, Allowing Cluster-Wide BGP Route Injection
• CVE-2026-32254HIGH 7.1Kube-router is a turnkey solution for Kubernetes networking. Prior to version 2.8.0, Kube-router's proxy module does not validate externalIP…