CVE-2025-1974

Kubernetes · Published March 24, 2025

9.8

CVSS v3.1

CRITICAL

Patch availableGet patch

Description

Ingress NGINX Controller for Kubernetes allows unauthenticated remote code execution via the admission webhook. Named 'IngressNightmare' — affects ~43% of cloud environments. An attacker on the pod network can achieve cluster-level RCE.

Affected Products

ingress-nginx < 1.11.5
ingress-nginx < 1.12.1

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Related Advisories

CVECRITICALCVE-2025-1974

'IngressNightmare' — Critical RCE in Kubernetes Ingress NGINX Affects 43% of Cloud Clusters

Five vulnerabilities in the Kubernetes ingress-nginx controller, collectively dubbed IngressNightmare, allow unauthenticated attackers with access to the admission webhook to achieve cluster-level code execution.

WHY IT MATTERS

If you run ingress-nginx without restricting webhook access, any compromised pod in your cluster can steal secrets from all namespaces — upgrade or restrict the webhook now.

Remote Code ExecutionT1190 Exploit Public-Facing AppSupply Chain

Mar 24, 2025· 5 min read