Vulnerability in Amazon EKS Network Policy Agent
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 8.7, CVEs: CVE-2026-122266, Summary: Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS Network Policy Agent before 1.3.7 (VPC CNI before 1.22.3) might allow an authenticated adjacent user to bypass NetworkPolicy ingress enforcement on co-located pods via eBPF conntrack map poisoning using crafted AF_PACKET frames.
EPSS < 0.01 CVSS 8.7 CVE-2026-122266 Amazon FI