kube-router: GoBGP gRPC Admin Port Exposed on Node Primary IP Without Authentication, Allowing Cluster-Wide BGP Route Injection in github.com/cloudnativelabs/kube-router

Description

References

• cloudnativelabs/kube-router security advisory · ADVISORY

Weitere Schwachstellen in github.com/cloudnativelabs/kube-router

• GO-2026-5354kube-router: BGP Peer Passwords Exposed in Logs at Verbose Logging Level in github.com/cloudnativelabs/kube-router
• GHSA-v5mh-h5hx-7v92MITTEL 6.3kube-router: GoBGP gRPC Admin Port Exposed on Node Primary IP Without Authentication, Allowing Cluster-Wide BGP Route Injection
• CVE-2026-32254HOCH 7.1Kube-router is a turnkey solution for Kubernetes networking. Prior to version 2.8.0, Kube-router's proxy module does not validate externalIP…