Ingress-nginx admission controller RCE escalation (CVE-2025-1974)

A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. Note...

CVE-2025-1974

A critical security issue, part of the IngressNightmare suite, allows an unauthenticated attacker with access to the pod network to achieve arbitrary code execution (RCE) in the context of the ingress-nginx controller . This vulnerability can lead to the disclosure of Secrets accessible to the co...