AWS resolves eBPF NetworkPolicy ingress bypass flaw in Amazon EKS
What happened.Amazon Web Services published security bulletin 2026-170-AWS detailing a resource isolation defect in the Amazon EKS Network Policy Agent.
Why it matters.Kubernetes network policies establish zero-trust boundaries within shared container clusters. When eBPF connection tracking tables fail to partition traffic state between co-located pods, low-privileged containers establish unauthorized sessions with internal services. DevOps teams running Amazon EKS must upgrade the Amazon VPC CNI add-on to version 1.22.3. Platform architects should restrict raw socket capabilities across container pods.