CVE-2026-86831: Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS
Amazon EKS ยท 2026-09-16
Actions
Technical Details
| Affected Versions | 1.14.0<1.22.3, Amazon VPC CNI Managed Add-on < v1.4.0 |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-86831 |
| Migration Required | Yes |
| Cost Impact | Neutral |
| IaC Impact | High |
What This Means
For DevOps Teams
Update the Amazon EKS Network Policy Agent to version 1.4.0 or later and Amazon VPC CNI Managed Add-on to v1.22.4 or later to remediate the security vulnerability CVE-2026-86831, ensuring continued secure operation of your Kubernetes environment.
For Platform Teams
Adopt the latest versions of Amazon EKS Network Policy Agent and Amazon VPC CNI Managed Add-on to integrate enhanced security measures, ensuring that your platform remains secure and compliant with best practices.
For Executives
Implement the upgrade to Amazon EKS Network Policy Agent 1.4.0 or later to mitigate the security risk of CVE-2026-86831, ensuring robust network policy enforcement and maintaining the integrity of your Kubernetes clusters.
Source
Related Amazon EKS Updates
- Amazon EKS now supports multiple external OIDC identity providers per cluster (2026-08-24)
- Amazon EKS Capability for Argo CD now supports custom configuration (2026-08-21)
- Amazon EKS now supports certificate authority (CA) rotation with automated lifecycle management (2026-08-20)
- Amazon EKS now supports advanced Kubernetes control plane configuration parameters (2026-08-12)
- Introducing advanced Kubernetes control plane configuration in Amazon EKS (2026-08-12)