Input validation error in Ingress-NGINX Controller for Kubernetes - CVE-2025-1974

Vulnerability details

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to an unspecified vulnerability in admission controller. A remote non-authenticated attacker with access to the pod network and execute arbitrary code in the context of the ingress-nginx controller

Affected software

How to mitigate CVE-2025-1974

Links to Public Exploits and PoC-codes

• Exploit #11414 - exploit-cve-2025-1974 () (May 23, 2025)
• Exploit #11380 - CVE-2025-1974_IngressNightmare_PoC (May 9, 2025)
• Exploit #11306 - CVE-2025-1974-go (Exploit CVE-2025-1974 with a single file.) (April 11, 2025)
• Exploit #11261 - CVE-2025-1974 (March 31, 2025)
• Exploit #11253 - IngressNightmare-POCs (March 25, 2025)
• Exploit #11252 - CVE-2025-1974 (March 25, 2025)

External References

• https://github.com/kubernetes/kubernetes/issues/131009
• https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v1.12.1
• https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v1.11.5
• https://github.com/advisories/GHSA-mgvx-rpfc-9mpv

Related Security Bulletins

• Multiple vulnerabilities in Ingress-NGINX Controller for Kubernetes
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Network Function Cloud Native Environment
• Dell SmartFabric Manager update for third-party components
• Dell Container Storage Modules update for ingress-nginx
• Multiple vulnerabilities in Communications Unified Assurance