{"id":"CVE-2026-65960","published":"2026-11-06T20:17:24.397","lastModified":"2026-11-10T20:19:33.823","description":"Tetragon is an eBPF-based security observability and runtime enforcement project. Versions before 1.7.0 can use a Helm default that exposes the privileged Tetragon gRPC API through an unauthenticated TCP listener on localhost:54321. An attacker who can run or compromise same-node hostNetwork pods can reach the listener and invoke privileged methods without authentication. These methods can add, delete, or reconfigure tracing policies and change debug settings, potentially resulting in privilege escalation or container escape. Version 1.7.0 changes the default endpoint to a Unix-domain socket. Deployments that do not expose an unauthenticated TCP listener are not affected.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-306"],"vendors":[],"products":[],"references":[{"url":"https://github.com/cilium/tetragon/commit/8e89933d3526f37c04f7523013ff32f8b1c6f62a","tags":[]},{"url":"https://github.com/cilium/tetragon/commit/fe46101770b960ebbf39fe9749bb20d49cf178b2","tags":[]},{"url":"https://github.com/cilium/tetragon/pull/4882","tags":[]},{"url":"https://github.com/cilium/tetragon/releases/tag/v1.7.0","tags":[]},{"url":"https://github.com/cilium/tetragon/security/advisories/GHSA-6qqg-3qf7-p3v5","tags":[]}],"exploitRefs":[{"url":"https://github.com/cilium/tetragon/commit/8e89933d3526f37c04f7523013ff32f8b1c6f62a","tags":[]},{"url":"https://github.com/cilium/tetragon/commit/fe46101770b960ebbf39fe9749bb20d49cf178b2","tags":[]},{"url":"https://github.com/cilium/tetragon/pull/4882","tags":[]},{"url":"https://github.com/cilium/tetragon/releases/tag/v1.7.0","tags":[]},{"url":"https://github.com/cilium/tetragon/security/advisories/GHSA-6qqg-3qf7-p3v5","tags":[]}],"hasPoc":true,"ai":{"summary":"Tetragon versions before 1.7.0 expose an unauthenticated gRPC API on localhost:54321 by default, allowing same-node attackers with hostNetwork access to invoke privileged operations like modifying tracing policies or changing debug settings without authentication. This bypasses authentication entirely (CWE-306) and can lead to privilege escalation or container escape.","exploitability":"Exploitation requires the attacker to run or compromise a pod on the same node with hostNetwork access to reach the localhost:54321 listener; it is straightforward if those conditions are met.","blast_radius":"Successful exploitation enables full control over Tetragon’s runtime enforcement and observability policies, potentially leading to privilege escalation, container escape, or disabling of security monitoring across the node.","remediation":"Upgrade to Tetragon version 1.7.0 or later, which changes the default gRPC endpoint to a Unix-domain socket; for deployments unable to upgrade immediately, disable the unauthenticated TCP listener by explicitly configuring a secure endpoint (e.g., Unix socket) and removing any exposed TCP listener configuration.","detection":"Defenders should monitor for connections to localhost:54321 from hostNetwork pods in logs from Tetragon’s gRPC server or network monitoring tools; additionally, inspect Tetragon configuration for active TCP listeners on port 54321. No reliable host or network indicator is derivable from the published description if the listener is not explicitly logged.","tags":["auth-bypass","privilege-escalation","container-escape","ebpf","grpc","localhost-exposure"],"model":"garnet-coder","analyzedAt":"2026-11-08T09:51:56.946Z"}}