Arbitrary Code Execution (ACE)

🗓️ 02 Apr 2025 23:26:33Reported by Veracode Vulnerability DatabaseType

k8s.io/ingress-nginx is vulnerable to Arbitrary Code Execution via improper input validation in auth-url.

Reporter	Title	Published	Views	Family All 79
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in ingress-nginx	14 Apr 202515:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	29 Apr 202502:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by Kubernetes Ingress Controller security vulnerabilities (CVE-2025-24514, CVE-2025-1097, CVE-2025-1098)	3 Apr 202516:57	–	ibm
GithubExploit	Exploit for CVE-2025-1974	27 Apr 202505:07	–	githubexploit
GithubExploit	Exploit for CVE-2025-1974	26 Mar 202506:43	–	githubexploit
GithubExploit	Exploit for CVE-2025-1974	26 Apr 202502:30	–	githubexploit
GithubExploit	Exploit for CVE-2025-24514	11 Jun 202520:04	–	githubexploit
GithubExploit	Exploit for CVE-2025-1097	26 Mar 202518:52	–	githubexploit
GithubExploit	Exploit for CVE-2025-1974	26 Jun 202509:24	–	githubexploit
Information Security Automation	About Remote Code Execution – Kubernetes (CVE-2025-1974) vulnerability	27 Mar 202518:51	–	avleonov

Vulners

Node

kubernetes k8s.io/ingress-nginxRangecontroller-v0.34.0–controller-v1.11.4go

kubernetes k8s.io/ingress-nginxRangecontroller-v1.12.0-beta.0–controller-v1.12.0go

Source	Link
github	www.github.com/kubernetes/ingress-nginx/commit/e6716b13f237fb42a05117784fdee004e74fc801
github	www.github.com/kubernetes/ingress-nginx/releases/tag/controller-v1.11.5
github	www.github.com/kubernetes/ingress-nginx/commit/626305229ffa800e226f33f1396bcb164be099ed
github	www.github.com/kubernetes/kubernetes/issues/131006
github	www.github.com/kubernetes/ingress-nginx/releases/tag/controller-v1.12.1
exploit-db	www.exploit-db.com/exploits/52475
security	www.security.netapp.com/advisory/ntap-20250328-0008/
github	www.github.com/advisories/GHSA-fwwp-xcxw-39vq
groups	www.groups.google.com/g/kubernetes-security-announce/c/2qa9DFtN0cQ

04 Feb 2026 21:30Current

9.6High risk

Vulners AI Score9.6

CVSS 3.18.8

EPSS0.47478

SSVC