CVE-2026-24512

🗓️ 03 Feb 2026 22:17:08Reported by kubernetesType

cve🔗 web.nvd.nist.gov👁 207 Views🌐 WEB

CVE-2026-24512: Ingress-nginx path config injection enables code execution and secrets access by the controller.

Reporter	Title	Published	Views	Family All 46
GithubExploit	Exploit for CVE-2026-3288	8 Apr 202611:26	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by Kubernetes Ingress Controller security vulnerabilities (CVE-2026-24513, CVE-2026-1580, CVE-2026-24514, CVE-2026-24512)	11 Feb 202609:57	–	ibm
ATTACKERKB	CVE-2026-24512	3 Feb 202622:17	–	attackerkb
BDU FSTEC	The vulnerability of the ingress controller in the Kubernetes cluster ingress-nginx, related to insufficient validation of incoming data, allows a perpetrator to gain unauthorized access to protected information and execute arbitrary code within the controller’s context.	6 Feb 202600:00	–	bdu_fstec
Chainguard	CVE-2026-24512 vulnerabilities	2 Jul 202614:17	–	cgr
Circl	CVE-2026-24512	2 Feb 202615:57	–	circl
CNNVD	Kubernetes ingress-nginx 安全漏洞	3 Feb 202600:00	–	cnnvd
Cvelist	CVE-2026-24512 ingress-nginx auth-method nginx configuration injection	3 Feb 202622:17	–	cvelist
EUVD	EUVD-2026-6096	16 Feb 202612:30	–	euvd
F5 Networks	K000160575: ingress-nginx vulnerability CVE-2026-24512	1 Apr 202614:17	–	f5

[
  {
    "defaultStatus": "affected",
    "product": "ingress-nginx",
    "repo": "https://github.com/kubernetes/ingress-nginx",
    "vendor": "Kubernetes",
    "versions": [
      {
        "lessThan": "1.13.7",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      },
      {
        "lessThan": "1.14.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
github	www.github.com/kubernetes/kubernetes/issues/136678

Parameter	Position	Path	Description	CWE
path	path	/api" return 200 "HACKED BY ATTACKER	Path injection via unescaped input in API path leading to arbitrary nginx directives	CWE-20
path	path	/login" return 200 "Token: $http_authorization	Credential theft via reflection of Authorization header in response path input	CWE-20
path	path	/" return 302 "https://evil.com/phishing	Phishing redirect via path injection to attacker-controlled URL	CWE-20

17 Jun 2026 10:23Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.18.8

EPSS0.00501

SSVC

CWE-20