What is 2026-170-AWS?

2026-170-AWS is a security advisory published by AWS Security Bulletins. CVE-2026-122266 - Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS

Which CVE IDs does 2026-170-AWS cover?

2026-170-AWS covers the following CVE IDs: CVE-2026-122266. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

2026-170-AWS

CVE-2026-122266 - Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS

Vendor

AWS Security Bulletins

Published

November 4, 2026

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2026-122266 →

📋 Description

Bulletin ID: 2026-170-AWS Publication Date: 11/04/2026 13:30 PM PST Description: We identified CVE-2026-122266, an issue in Amazon EKS Network Policy Agent (aws-network-policy-agent). Improper isolation of shared eBPF connection tracking state might allow an authenticated adjacent user to bypass NetworkPolicy ingress enforcement on co-located pods. Impacted versions: - aws-network-policy-agent - Amazon VPC CNI Managed Add-on
Refer to the article below for the most up-to-date and complete information. Read this article

🔗 References (1)

advisoryhttps://aws.amazon.com/security/security-bulletins/rss/2026-170-aws/