amazon-vpc-cni-k8s vulnerabilities

2 known vulnerabilities in amazon-vpc-cni-k8s from AWS. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  aws-network-policy-agent: Improper Isolation of Shared Resources on System-on-a-Chip (SoC)

  CVE-2026-122266Nov 4, 2026AWS

  Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS Network Policy Agent before 1.3.7 (VPC CNI before 1.22.3) might allow an authenticated adjacent user to bypass NetworkPolicy ingress enforcement on co-located pods via eBPF conntr

• 8.7 High severity

  aws-network-policy-agent: Improper Validation of Unsafe Equivalence in Input

  CVE-2026-86831Sep 16, 2026AWS

  Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS Network Policy Agent before v1.4.0 might allow an authenticated remote user to bypass NetworkPolicy enforcement on co-located pods in other namespaces via crafted pod an