Kube-router is a turnkey solution for Kubernetes networking. Prior to version 2.8.0, Kube-router's proxy module does not validate externalIPs or loadBalancer IP…

Published:

17 maart 2026 om 23:00:00

Alert date:

18 maart 2026 om 15:08:05

Source:

nvd.nist.gov

Cloud & Virtualization, Network Infrastructure

CVE-2026-32254 affects Kube-router, a Kubernetes networking solution. Prior to version 2.8.0, the proxy module fails to validate externalIPs or loadBalancer IPs before programming them into node network configuration. This vulnerability allows potential network configuration manipulation. Version 2.8.0 contains a patch, and several workarounds are available including enabling DenyServiceExternalIPs feature gate, deploying admission policies, restricting service creation RBAC, monitoring service changes, and applying BGP prefix filtering.

Technical details

Mitigation steps:

Affected products:

Kube-router