CVE Feed

    Dashboard / CVE / CVE-2025-1974

    CVE-2025-1974

    A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)

    Published:Mar 24, 2025
    Last Modified:Apr 15, 2026
    EPS:Mar 24, 2025
    EPSS Score:0.90252
    CVSS Score:9.8

    Affected Products

    Vendor
    Kubernetes
    Product
    Ingress-nginx

    Exploits

    https://www.exploit-db.com/exploits/52338https://github.com/0xBingo/CVE-2025-1974https://github.com/1w4y/IngressNightmare-RCE-POChttps://github.com/abrewer251/CVE-2025-1974_IngressNightmare_PoChttps://github.com/Armand2002/Exploit-CVE-2025-1974-Labhttps://github.com/Ashwesker/Blackash-CVE-2025-1974https://github.com/B1ack4sh/Blackash-CVE-2025-1974https://github.com/BiiTts/POC-IngressNightmare-CVE-2025-1974https://github.com/BoianEduard/CVE-2025-1974https://github.com/chhhd/CVE-2025-1974https://github.com/dttuss/IngressNightmare-RCE-POChttps://github.com/Esonhugh/ingressNightmare-CVE-2025-1974-expshttps://github.com/gunyakit/CVE-2025-1974-PoC-exploithttps://github.com/hi-unc1e/CVE-2025-1974-pochttps://github.com/I3r1h0n/IngressNightterrorhttps://github.com/iteride/CVE-2025-1974https://github.com/m-q-t/ingressnightmare-detection-pochttps://github.com/Rickerd12/exploit-cve-2025-1974https://github.com/rjhaikal/POC-IngressNightmare-CVE-2025-1974https://github.com/Rubby2001/CVE-2025-1974-gohttps://github.com/salt318/CVE-2025-1974https://github.com/sandumjacob/IngressNightmare-POCshttps://github.com/tuladhar/ingress-nightmarehttps://github.com/yanmarques/CVE-2025-1974https://github.com/yoshino-s/CVE-2025-1974https://github.com/zsxen/CVE-2025-1974https://github.com/zsxen/cve-2025-1974-labhttps://github.com/zulloper/CVE-2025-1974https://github.com/zwxxb/CVE-2025-1974https://www.exploit-db.com/exploits/52475

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-4342 (CVSS 8.8) — A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inj…
    CVE-2026-3288 (CVSS 8.8) — A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingres…
    CVE-2025-15566 (CVSS 8.8) — A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-proxy-set-headers…
    CVE-2026-24514 (CVSS 6.5) — A security issue was discovered in ingress-nginx where the validating admission controller feature is subject …
    CVE-2026-24513 (CVSS 3.1) — A security issue was discovered in ingress-nginx where the protection afforded by the `auth-url` Ingress annot…
    CVE-2026-24512 (CVSS 8.8) — A security issue was discovered in ingress-nginx where the `rules.http.paths.path` Ingress field can be used t…
    CVE-2026-1580 (CVSS 8.8) — A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-method` Ingress a…
    CVE-2025-24514 (CVSS 8.8) — A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth…
    CVE-2025-24513 (CVSS 4.8) — A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where attacker-…
    CVE-2025-1098 (CVSS 8.8) — A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `mirr…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High