CVE-2026-34992 is a vulnerability in Antrea affecting dual-stack clusters configured with IPsec encryption. Specifically, IPv6 Pod traffic between nodes is not encrypted, while IPv4 traffic is properly encrypted. This occurs because IPv6 packets bypass the IPsec encryption layer despite being encapsulated. Single-stack IPv4 or IPv6 clusters are not impacted. The issue has been patched in Antrea versions 2.6.0 and later, 2.5.2, and 2.4.5. No configuration workaround exists for affected versions, but users may use WireGuard as an alternative encryption method. Antrea provides a validation tool to verify correct IPsec encryption after upgrading.