CVE-2026-122266

Vendor

AWS

Product

aws-network-policy-agent, amazon-vpc-cni-k8s

CVSS v3.1

8.7 AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Weakness

CWE-1189

Exposure class

Operating system, Cloud platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 42
   CVE NVD 23h ago

   Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS Network Policy Agent before 1.3.7 (VPC CNI before 1.22.3) might…

   Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS Network Policy Agent before 1.3.7 (VPC CNI before 1.22.3) might allow an authenticated adjacent user to bypass NetworkPolicy ingress enforcement on…

   CVSS 8.7 CVE-2026-122266 AWS
2. 31
   AWS bulletin AWS 24h ago

   CVE-2026-122266 - Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS

   Bulletin ID: 2026-170-AWS Publication Date: 11/04/2026 13:30 PM PST Description: We identified CVE-2026-122266, an issue in Amazon EKS Network Policy Agent (aws-network-policy-agent). Improper isolation of shared eBPF connection…

   CVE-2026-122266 Amazon Web Services Linux kernel