AWS flags CVE-2026-122266, a NetworkPolicy bypass in the Amazon EKS network policy agent
VULNERABILITYCVE-2026-122266redteam/daily · 1 source
- Severity
- Medium
- Highest CVSS
- 6.3
- Exploited
- Not known
- Sources
- 1
What happened
Amazon has warned that a flaw in part of its Kubernetes networking software for EKS could let a logged-in user on the same network get past rules meant to control incoming traffic to some containers. Fixed versions are available, so customers using the affected components should update them.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Check the aws-network-policy-agent version and update it to 1.3.7 or later.
- Check the Amazon VPC CNI Managed Add-on version and update it to 1.22.3 or later.
- Review the AWS bulletin 2026-170-AWS for complete remediation information.
Written by AI from the sources, checked against them
Vulnerabilities
Full story timeline · 2 updates
Who reported · 1 outlet
AWS Security Bulletins