ingress-nginx Configuration Injection

A security issue was discovered in ingress-nginx where the nginx.ingress.kubernetes.io/rewrite-target Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible t...

Contour 代码注入漏洞

Contour is an open-source Kubernetes ingress controller that uses Envoy proxies. Versions of Contour from v1.19.0 to v1.33.4, v1.32.5 before v1.32.5, and v1.31.6 before v1.31.6 had a code injection vulnerability. This vulnerability stemmed from the Cookie rewriting feature, which was vulnerable t...

CVE-2026-27143 vulnerabilities

Vulnerabilities for packages: argo-cd, cni-plugins, istio, falco-no-driver, knative-eventing, argo-rollouts, envoy-gateway, percona-server-mongodb-operator, rancher-agent, aws-application-networking-k8s, gitaly, opencost, nri-f5, mage, harbor, mattermost, cadvisor, hey, opentelemetry-operator,...

GHSA-CFP9-33RC-J74F vulnerabilities

Vulnerabilities for packages: argo-cd, cni-plugins, istio, falco-no-driver, knative-eventing, argo-rollouts, envoy-gateway, percona-server-mongodb-operator, rancher-agent, aws-application-networking-k8s, gitaly, opencost, nri-f5, mage, harbor, mattermost, cadvisor, hey, opentelemetry-operator,...

GHSA-CQRX-3M42-5P5W vulnerabilities

Vulnerabilities for packages: argo-cd, cni-plugins, istio, falco-no-driver, knative-eventing, argo-rollouts, envoy-gateway, percona-server-mongodb-operator, rancher-agent, aws-application-networking-k8s, gitaly, opencost, nri-f5, mage, harbor, mattermost, cadvisor, hey, opentelemetry-operator,...

CVE-2026-27144 vulnerabilities

Vulnerabilities for packages: argo-cd, cni-plugins, istio, falco-no-driver, knative-eventing, argo-rollouts, envoy-gateway, percona-server-mongodb-operator, rancher-agent, aws-application-networking-k8s, gitaly, opencost, nri-f5, mage, harbor, mattermost, cadvisor, hey, opentelemetry-operator,...

CVE-2026-27143 vulnerabilities

Vulnerabilities for packages: atlantis, knative-operator, tetragon, docker-cli, neuvector, gitaly, grafana, buildkite-agent, mongo-tools, buf, beats-fips, cluster-api-fips, datadog-agent, gofumpt, pvc-autoresizer, newrelic-nri-statsd, rancher-agent, vault, aws-flb-kinesis-fips, http-echo,...

CVE-2026-27144 vulnerabilities

Vulnerabilities for packages: atlantis, knative-operator, tetragon, docker-cli, neuvector, gitaly, grafana, buildkite-agent, mongo-tools, buf, beats-fips, cluster-api-fips, datadog-agent, gofumpt, pvc-autoresizer, newrelic-nri-statsd, rancher-agent, vault, aws-flb-kinesis-fips, http-echo,...

GHSA-CFP9-33RC-J74F vulnerabilities

Vulnerabilities for packages: atlantis, knative-operator, tetragon, docker-cli, neuvector, gitaly, grafana, buildkite-agent, mongo-tools, buf, beats-fips, cluster-api-fips, datadog-agent, gofumpt, pvc-autoresizer, newrelic-nri-statsd, rancher-agent, vault, aws-flb-kinesis-fips, http-echo,...

GHSA-CQRX-3M42-5P5W vulnerabilities

Vulnerabilities for packages: atlantis, knative-operator, tetragon, docker-cli, neuvector, gitaly, grafana, buildkite-agent, mongo-tools, buf, beats-fips, cluster-api-fips, datadog-agent, gofumpt, pvc-autoresizer, newrelic-nri-statsd, rancher-agent, vault, aws-flb-kinesis-fips, http-echo,...

ingress-nginx comment-based nginx configuration injection

A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. Note that i...

GHSA-F53H-MXV9-CP98 ingress-nginx comment-based nginx configuration injection

A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. Note that i...

Kubernetes ingress-nginx 安全漏洞

Kubernetes ingress-nginx is a Kubernetes entry controller open-sourced by the Cloud Native Computing Foundation. It uses NGINX as a reverse proxy and load balancer. There is a security vulnerability in Kubernetes ingress-nginx. This vulnerability stems from the Ingress annotation combination, whi...

BIT-NGINX-INGRESS-CONTROLLER-2026-3288 ingress-nginx rewrite-target nginx configuration injection

A security issue was discovered in ingress-nginx where the nginx.ingress.kubernetes.io/rewrite-target Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible t...

Security Bulletin: IBM Cloud Kubernetes Service is affected by Kubernetes Ingress Controller security vulnerability (CVE-2026-3288)

Summary IBM Cloud Kubernetes Service is affected by Kubernetes Ingress Controller security vulnerability CVE-2026-3288. A security issue was discovered in ingress-nginx where the nginx.ingress.kubernetes.io/rewrite-target Ingress annotation can be used to inject configuration into nginx. This can...

ROS-20260311-73-0011

A vulnerability in the inbound traffic controller in a Kubernetes ingress-nginx cluster is related to insufficient input validation. Exploitation of the vulnerability could allow a remote attacker to gain unauthorized access to protected information and execute arbitrary code in the context of th...

Resource Injection

Overview Affected versions of this package are vulnerable to Resource Injection via the buildProxyPass function. An attacker can execute arbitrary code and access sensitive information by injecting malicious configuration into the nginx controller process. Remediation Upgrade...

EUVD-2026-10360

A security issue was discovered in ingress-nginx where the nginx.ingress.kubernetes.io/rewrite-target Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible t...

BIT-NGINX-INGRESS-CONTROLLER-2026-24514 ingress-nginx Admission Controller denial of service

A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a denial of service condition. By sending large requests to the validating admission controller, an attacker can cause memory consumption, which may result in the ingress-nginx...

Security Bulletin: IBM Cloud Kubernetes Service is affected by Kubernetes Ingress Controller security vulnerabilities (CVE-2026-24513, CVE-2026-1580, CVE-2026-24514, CVE-2026-24512)

Summary IBM Cloud Kubernetes Service is affected by multiple Kubernetes Ingress Controller security vulnerabilities. - A user with access to create or update Ingress objects can use the rules.http.paths.path Ingress field to inject configuration into nginx CVE-2026-24512 - The...