CVE-2025-1097
High · 8.8CVSS
8.8
EPSS
33.2%
Published
Mar 25, 2025
CISA due date
—
The record
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-cn` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | k8s.io/ingress-nginx | 0 | No fix |
| Go | k8s.io/ingress-nginx | 0 | 1.11.5 |
| Go | k8s.io/ingress-nginx | 1.12.0-beta.0 | 1.12.1 |
| Bitnami | nginx-ingress-controller | 0 | 1.11.7 |
| Bitnami | nginx-ingress-controller | 0 | 1.12.1 |
| Chainguard | ingress-nginx-controller-1.10 | 0 | 0 |
| Chainguard | ingress-nginx-controller-1.10-compat | 0 | 0 |
| Chainguard | ingress-nginx-controller-1.10-kube-webhook-certgen | 0 | 0 |
| Chainguard | ingress-nginx-controller-1.11 | 0 | 1.11.5-r0 |
| Chainguard | ingress-nginx-controller-1.11-compat | 0 | 1.11.5-r0 |
| Chainguard | ingress-nginx-controller-1.11-kube-webhook-certgen | 0 | 1.11.5-r0 |
| Chainguard | ingress-nginx-controller-1.12 | 0 | 1.12.1-r14 |
| Chainguard | ingress-nginx-controller-bitnami-compat-1.10 | 0 | 0 |
| Chainguard | ingress-nginx-controller-bitnami-compat-1.11 | 0 | 1.11.5-r0 |
| Chainguard | ingress-nginx-controller-bitnami-compat-1.12 | 0 | 1.12.1-r14 |
| Chainguard | ingress-nginx-controller-compat-1.10 | 0 | 0 |
| Chainguard | ingress-nginx-controller-compat-1.11 | 0 | 1.11.5-r0 |
| Chainguard | ingress-nginx-controller-compat-1.12 | 0 | 1.12.1-r14 |
| Chainguard | ingress-nginx-controller-fips-1.10 | 0 | 0 |
| Chainguard | ingress-nginx-controller-fips-1.11 | 0 | 1.11.5-r0 |
| Chainguard | ingress-nginx-controller-fips-1.12 | 0 | 1.12.1-r0 |
| Chainguard | ingress-nginx-controller-fips-bitnami-compat-1.11 | 0 | 1.11.5-r0 |
| Chainguard | ingress-nginx-controller-fips-bitnami-compat-1.12 | 0 | 1.12.1-r0 |
| Chainguard | ingress-nginx-controller-fips-compat-1.11 | 0 | 1.11.5-r0 |
| Chainguard | ingress-nginx-controller-fips-compat-1.12 | 0 | 1.12.1-r0 |
| Chainguard | ingress-nginx-controller-fips-iamguarded-compat-1.11 | 0 | 1.11.5-r0 |
| Chainguard | ingress-nginx-controller-fips-iamguarded-compat-1.12 | 0 | 1.12.1-r0 |
| Chainguard | ingress-nginx-controller-iamguarded-compat-1.11 | 0 | 1.11.5-r0 |
| Chainguard | ingress-nginx-controller-iamguarded-compat-1.12 | 0 | 1.12.1-r14 |
| Chainguard | ingress-nginx-custom-error-pages-1.10 | 0 | 0 |
| Chainguard | ingress-nginx-custom-error-pages-1.11 | 0 | 1.11.5-r0 |
| Chainguard | ingress-nginx-custom-error-pages-1.12 | 0 | 1.12.1-r14 |
| Chainguard | ingress-nginx-custom-error-pages-compat-1.10 | 0 | 0 |
| Chainguard | ingress-nginx-custom-error-pages-compat-1.11 | 0 | 1.11.5-r0 |
| Chainguard | ingress-nginx-custom-error-pages-compat-1.12 | 0 | 1.12.1-r14 |
| Chainguard | ingress-nginx-custom-error-pages-fips-1.10 | 0 | 0 |
| Chainguard | ingress-nginx-custom-error-pages-fips-1.11 | 0 | 1.11.5-r0 |
| Chainguard | ingress-nginx-custom-error-pages-fips-1.12 | 0 | 1.12.1-r0 |
| Chainguard | ingress-nginx-fips-custom-error-pages-1.11 | 0 | 1.11.5-r0 |
| Chainguard | ingress-nginx-fips-custom-error-pages-1.12 | 0 | 1.12.1-r0 |
| Chainguard | ingress-nginx-fips-custom-error-pages-compat-1.11 | 0 | 1.11.5-r0 |
| Chainguard | ingress-nginx-fips-custom-error-pages-compat-1.12 | 0 | 1.12.1-r0 |
| Chainguard | ingress-nginx-fips-opentelemetry-plugin-1.11 | 0 | 1.11.5-r0 |
| Chainguard | ingress-nginx-fips-opentelemetry-plugin-1.12 | 0 | 1.12.1-r0 |
| Chainguard | ingress-nginx-opentelemetry-1.11 | 0 | 1.11.5-r0 |
| Chainguard | ingress-nginx-opentelemetry-compat-1.11 | 0 | 1.11.5-r0 |
| Chainguard | ingress-nginx-opentelemetry-plugin-1.10 | 0 | 0 |
| Chainguard | ingress-nginx-opentelemetry-plugin-1.11 | 0 | 1.11.5-r0 |
| Chainguard | ingress-nginx-opentelemetry-plugin-1.12 | 0 | 1.12.1-r14 |
| Chainguard | kube-webhook-certgen-1.10 | 0 | 0 |
| Chainguard | kube-webhook-certgen-1.11 | 0 | 1.11.5-r0 |
| Chainguard | kube-webhook-certgen-1.12 | 0 | 1.12.1-r14 |
| Chainguard | kube-webhook-certgen-fips-1.10 | 0 | 0 |
| Chainguard | kube-webhook-certgen-fips-1.11 | 0 | 1.11.5-r0 |
| Chainguard | kube-webhook-certgen-fips-1.12 | 0 | 1.12.1-r0 |
| Wolfi | ingress-nginx-controller-1.10 | 0 | 0 |
| Wolfi | ingress-nginx-controller-1.10-compat | 0 | 0 |
| Wolfi | ingress-nginx-controller-1.10-kube-webhook-certgen | 0 | 0 |
| Wolfi | ingress-nginx-controller-1.11 | 0 | 1.11.5-r0 |
| Wolfi | ingress-nginx-controller-1.11-compat | 0 | 1.11.5-r0 |
| Wolfi | ingress-nginx-controller-1.11-kube-webhook-certgen | 0 | 1.11.5-r0 |
| Wolfi | ingress-nginx-controller-1.12 | 0 | 1.12.1-r14 |
| Wolfi | ingress-nginx-controller-bitnami-compat-1.12 | 0 | 1.12.1-r14 |
| Wolfi | ingress-nginx-controller-compat-1.11 | 0 | 1.11.5-r0 |
| Wolfi | ingress-nginx-controller-compat-1.12 | 0 | 1.12.1-r14 |
| Wolfi | ingress-nginx-controller-iamguarded-compat-1.12 | 0 | 1.12.1-r14 |
| Wolfi | ingress-nginx-custom-error-pages-1.12 | 0 | 1.12.1-r14 |
| Wolfi | ingress-nginx-custom-error-pages-compat-1.12 | 0 | 1.12.1-r14 |
| Wolfi | ingress-nginx-opentelemetry-1.11 | 0 | 1.11.5-r0 |
| Wolfi | ingress-nginx-opentelemetry-compat-1.11 | 0 | 1.11.5-r0 |
| Wolfi | ingress-nginx-opentelemetry-plugin-1.12 | 0 | 1.12.1-r14 |
| Wolfi | kube-webhook-certgen-1.11 | 0 | 1.11.5-r0 |
| Wolfi | kube-webhook-certgen-1.12 | 0 | 1.12.1-r14 |
| go | k8s.io/ingress-nginx | 1.12.0-beta.0 | 1.12.1 |
| openSUSE:Tumbleweed | govulncheck-vulndb | 0 | 0.0.20250327T184518-1.1 |
Related vulnerabilities
- CVE-2026-24513 A security issue was discovered in ingress-nginx where the protection afforded by the… Also affects k8s.io/ingress-nginx
- CVE-2026-24514 A security issue was discovered in ingress-nginx where the validating admission… Also affects k8s.io/ingress-nginx
- CVE-2026-1580 A security issue was discovered in ingress-nginx where the… Also affects k8s.io/ingress-nginx
- CVE-2026-24512 A security issue was discovered in ingress-nginx where the `rules.http.paths.path`… Also affects k8s.io/ingress-nginx
- CVE-2025-24514 A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-ng… Also affects k8s.io/ingress-nginx
- CVE-2025-1098 A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-ng… Also affects k8s.io/ingress-nginx
- CVE-2025-1974 A security issue was discovered in Kubernetes where under certain conditions, an… Also affects k8s.io/ingress-nginx
- CVE-2024-7646 A security issue was discovered in ingress-nginx where an actor with permission to create… Also affects nginx-ingress-controller