kube-router: GoBGP gRPC Admin Port Exposed on Node Primary IP Without Authentication, Allowing Cluster-Wide BGP Route Injection in github.com/cloudnativelabs/kube-router

概要

参考情報

• cloudnativelabs/kube-router security advisory · ADVISORY

github.com/cloudnativelabs/kube-router のその他の脆弱性

• GO-2026-5354kube-router: BGP Peer Passwords Exposed in Logs at Verbose Logging Level in github.com/cloudnativelabs/kube-router
• GHSA-v5mh-h5hx-7v92中 6.3kube-router: GoBGP gRPC Admin Port Exposed on Node Primary IP Without Authentication, Allowing Cluster-Wide BGP Route Injection
• CVE-2026-32254高 7.1Kube-router is a turnkey solution for Kubernetes networking. Prior to version 2.8.0, Kube-router's proxy module does not validate externalIP…