CVE-2026-86831: aws-network-policy-agent 0 to before 1.4.0; +1 more affected products

CVE-2026-86831. CVSS 3.1 base score 8.7 (HIGH, Source advisory). EPSS 0.00643 (percentile 0.49935), scored 20-Oct-2026.

Affected technology

aws-network-policy-agent · 0 to before 1.4.0
AWS

amazon-vpc-cni-k8s · 1.14.0 to before 1.22.4
AWS

Description’s affected range: before v1.4.0 might

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 4.0): Network (remote) · High privileges required · No user interaction required

What an attacker can do

An authenticated remote user might bypass NetworkPolicy enforcement on co-located pods in other namespaces via crafted pod and namespace names that produce pod identifier collisions. Source advisory’s CVSS 4.0 assessment (base score 8.7/10) rates confidentiality and integrity impact as high; availability impact as none.

Published 20-Oct-2026 21:22 UTC

CWE: CWE-1289
CCR priority: 35.0 /100 (P4)
CVSS 3.1: 8.7 /10 · CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N · Source advisory
EPSS: 0.00643 · percentile 0.49935 · 2026-10-20
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-20 21:22:07.084487+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-86831.html