Linuxfoundation Antrea vulnerabilities

2 CVEs affecting Linuxfoundation Antrea, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-34992, published 2026-04-06.

More from Linuxfoundation.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-25804, published 2026-02-06. Critical severity, CVSS 9.1. EPSS: 0.7% chance of exploitation in the next 30 days. Antrea is a Kubernetes networking solution intended to be Kubernetes native. Prior to versions 2.3.2 and 2.4.3, Antrea's network policy priority assignment system has a uint16 arithmetic overflow bug…
• CVE-2026-34992, published 2026-04-06. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Antrea is a Kubernetes networking solution intended to be Kubernetes native. Prior to 2.4.5 and 2.5.2, a missing encryption vulnerability affects inter-Node Pod traffic. In Antrea clusters configured…