CVE-2026-65960— Tetragon: Unauthenticated Tetragon gRPC admin API accessible from hostNetwork pods

Quick assessment

Affected

cilium tetragon

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Tetragon 是一个基于 eBPF 的安全可观测性与运行时强制实施项目。在 1.7.0 版本之前，其 Helm 默认配置会通过 localhost:54321 上的未认证 TCP 监听器暴露特权级的 Tetragon gRPC API。任何能够运行或 compromise（控制）同一节点上 hostNetwork 类型 Pod 的攻击者，均可访问该监听器，并在无需身份验证的情况下调用特权方法。这些方法可用于添加、删除或重新配置追踪策略，以及修改调试设置，进而可能导致权限提升或容器逃逸。1.7.0 版本已将默认端

CVSS 8.8 · High Updated Nov 07, 2026

Possible ATT&CK Techniques 3 AI

T1055 · Process Injection T1548 · Abuse Elevation Control Mechanism T1068 · Exploitation for Privilege Escalation

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Tetragon: Unauthenticated Tetragon gRPC admin API accessible from hostNetwork pods

Source: CVE Program / CVE List V5

Vulnerability Description

Tetragon is an eBPF-based security observability and runtime enforcement project. Versions before 1.7.0 can use a Helm default that exposes the privileged Tetragon gRPC API through an unauthenticated TCP listener on localhost:54321. An attacker who can run or compromise same-node hostNetwork pods can reach the listener and invoke privileged methods without authentication. These methods can add, delete, or reconfigure tracing policies and change debug settings, potentially resulting in privilege escalation or container escape. Version 1.7.0 changes the default endpoint to a Unix-domain socket. Deployments that do not expose an unauthenticated TCP listener are not affected.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

关键功能的认证机制缺失

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
cilium	tetragon	< 1.7.0	-

II. Public POCs for CVE-2026-65960

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-65960

请登录查看更多情报信息。

Other References for CVE-2026-65960 (5)

https://github.com/cilium/tetragon/pull/4882 x_refsource_MISC
https://github.com/cilium/tetragon/releases/tag/v1.7.0 x_refsource_MISC
https://github.com/cilium/tetragon/security/advisories/GHSA-6qqg-3qf7-p3v5 x_refsource_CONFIRM
https://github.com/cilium/tetragon/commit/fe46101770b960ebbf39fe9749bb20d49cf178b2 x_refsource_MISC
https://github.com/cilium/tetragon/commit/8e89933d3526f37c04f7523013ff32f8b1c6f62a x_refsource_MISC

https://www.cve.org/CVERecord?id=CVE-2026-65960

IV. Related Vulnerabilities

Same vendor: cilium

Same weakness: CWE-306