antrea vulnerabilities

2 known vulnerabilities in antrea from Antrea-io. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  antrea: Missing Encryption of Sensitive Data

  CVE-2026-34992Apr 6, 2026Antrea-io

  Antrea is a Kubernetes networking solution intended to be Kubernetes native. Prior to 2.4.5 and 2.5.2, a missing encryption vulnerability affects inter-Node Pod traffic. In Antrea clusters configured for dual-stack networking with IPsec encryption enabled (tra

• 9.1 Critical severity

  antrea: Improper Authentication

  CVE-2026-25804Feb 6, 2026Antrea-io

  Antrea is a Kubernetes networking solution intended to be Kubernetes native. Prior to versions 2.3.2 and 2.4.3, Antrea's network policy priority assignment system has a uint16 arithmetic overflow bug that causes incorrect OpenFlow priority calculations when ha