AWS EKS Network Policy Agent Security Flaw – Update Required

Amazon EKS's aws-network-policy-agent has a vulnerability (CVE-2026-122266) where improper eBPF connection tracking isolation could let authenticated users bypass NetworkPolicy ingress rules on shared pods. Versions below 1.3.7 and VPC CNI Managed Add-on below 1.22.3 are affected. You need to update immediately to patch this.