Skip to content
OpenAdvisories
High WID-SEC-2025-0629 5 CVEs

Ingress NGINX Controller für Kubernetes: Mehrere Schwachstellen

Published Mar 24, 2025 · Updated Jan 15, 2026 · Revision 7 · de-DE

Vendor: IBM Vendor: SUSE Product: InfoSphere Information Server Product: openSUSE

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen im Ingress NGINX Controller für Kubernetes ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand zu verursachen.

Product

Kubernetes ist ein Werkzeug zur Automatisierung der Bereitstellung, Skalierung und Verwaltung von containerisierten Anwendungen.
Ingress NGINX Controller für Kubernetes wird häufig als Reverse Proxy und Load Balancer eingesetzt, um externen Traffic auf interne Kubernetes-Services weiterzuleiten.

Vulnerabilities 5

  • Critical 9.8
    CVE-2025-1974 Public exploit Scanner template EPSS 99%

    ingress-nginx admission controller RCE escalation

    A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secret…

    Kubernetes ingress-nginx ingress-nginx-controller-1.12 k8s.io/ingress-nginx Wolfi Go
  • High 8.8
    CVE-2025-1097 Public exploit Scanner template EPSS 37%

    ingress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation

    A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-cn` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingre…

    Kubernetes ingress-nginx ingress-nginx-controller-1.12 k8s.io/ingress-nginx Wolfi Go
  • High 8.8
    CVE-2025-1098 Public exploit Scanner template EPSS 86%

    ingress-nginx controller - configuration injection via unsanitized mirror annotations

    A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `mirror-target` and `mirror-host` Ingress annotations can be used to inject arbitrary configuration into nginx. This can lead to arbitrary code execution in…

    Kubernetes ingress-nginx ingress-nginx-controller-1.12 k8s.io/ingress-nginx Wolfi Go
  • High 8.8
    CVE-2025-24514 Public exploit Scanner template EPSS 37%

    ingress-nginx controller - configuration injection via unsanitized auth-url annotation

    A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx …

    Kubernetes ingress-nginx ingress-nginx-controller-1.12 k8s.io/ingress-nginx Wolfi Go
  • Medium 4.8
    CVE-2025-24513

    ingress-nginx controller - auth secret file path traversal vulnerability

    A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where attacker-provided data are included in a filename by the ingress-nginx Admission Controller feature, resulting in directory traversal within the container. This…

    Kubernetes ingress-nginx ingress-nginx-controller-1.12 k8s.io/ingress-nginx Wolfi Go

Revision history

  1. #7

    Neue Updates von openSUSE aufgenommen

  2. #6

    Neue Updates von openSUSE aufgenommen

  3. #5

    Neue Updates von IBM aufgenommen

  4. #4

    Neue Updates von openSUSE aufgenommen

  5. #3

    Referenz(en) aufgenommen: AWS-2025-006

  6. #2

    Produktbeschreibung ergänzt

  7. #1

    Initiale Fassung

References