CyberSecBulletin

Antrea-io vulnerabilities

We track 2 vulnerabilities in Antrea-io products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 6, 2026.

2vulnerabilities
1critical
1high
0exploited
8.3average CVSS score

Latest Antrea-io vulnerabilities

  • 7.5 High severity

    antrea: Missing Encryption of Sensitive Data

    CVE-2026-34992Antrea-io

    Antrea is a Kubernetes networking solution intended to be Kubernetes native. Prior to 2.4.5 and 2.5.2, a missing encryption vulnerability affects inter-Node Pod traffic. In Antrea clusters configured for dual-stack networking with IPsec encryption enabled (tra

  • 9.1 Critical severity

    antrea: Improper Authentication

    CVE-2026-25804Antrea-io

    Antrea is a Kubernetes networking solution intended to be Kubernetes native. Prior to versions 2.3.2 and 2.4.3, Antrea's network policy priority assignment system has a uint16 arithmetic overflow bug that causes incorrect OpenFlow priority calculations when ha