Bulletin ID: 2026-170-AWS
Publication Date: 11/04/2026 13:30 PM PST
Description:
We identified CVE-2026-122266, an issue in Amazon EKS Network Policy Agent (aws-network-policy-agent). Improper isolation of shared eBPF connection tracking state might allow an authenticated adjacent user to bypass NetworkPolicy ingress enforcement on co-located pods.
Impacted versions:
– aws-network-policy-agent < 1.3.7
– Amazon VPC CNI Managed Add-on < 1.22.3
Refer to the article below for the most up-to-date and complete information.
This article has been indexed from Latest Bulletins
Read the original article:
CVE-2026-122266 – Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS