Security Feed
See the latest insights and analysis from our MDR team.
RSS for SlackCVE-2026-86831
By Roy Kalfon |
17 September 2026
CVE-2026-86831 – Amazon EKS Network Policy Agent pod identifier ambiguity enables cross-namespace NetworkPolicy bypass
Amazon EKS aws-network-policy-agent before 1.4.0 can mis-enforce policies because pod IDs are built as -, where - is legal in both fields, allowing cross-namespace identifier collisions and NetworkPolicy bypass. Impacted: Amazon VPC CNI Managed Add-on above 1.14.0 and below 1.22.3 with agent