PT-2025-12714 · Unknown+1 · Ingress-Nginx+1

Nir Ohfeld + 2 · Published 2025-03-23 · Updated 2025-10-15 · CVE-2025-1098

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ingress-nginx versions prior to v1.11.5 ingress-nginx versions v1.12.0-beta.0 through v1.12.1

Description A security issue exists in ingress-nginx where the mirror-target and mirror-host Ingress annotations can be exploited to inject arbitrary configuration into nginx. Successful exploitation can lead to arbitrary code execution within the context of the ingress-nginx controller and potential disclosure of Secrets accessible to the controller. In a default installation, the controller has access to all Secrets cluster-wide. The issue stems from unsanitized mirror annotations.

Recommendations Upgrade to ingress-nginx version 1.11.5 or later. Upgrade to ingress-nginx version 1.12.1 or later.

Exploit

Fix

RCE

Weakness Enumeration

CWE-15

CWE-20

Related Identifiers

BDU:2025-05133

BIT-NGINX-INGRESS-CONTROLLER-2025-1098

CVE-2025-1098

GHSA-VG63-W3P9-JC9M

GO-2025-3568

OPENSUSE-SU-2025:14937-1

Affected Products

Red Os

Ingress-Nginx

References · 128

• 🔥 https://exploit-db.com/exploits/52475 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-1098 · Security Note
• https://osv.dev/vulnerability/GO-2025-3568 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-1098 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:14937-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-vg63-w3p9-jc9m · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://osv.dev/vulnerability/BIT-nginx-ingress-controller-2025-1098 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-05133 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/719082 · Security Note
• https://github.com/kubernetes/kubernetes/issues/131008 · Note
• https://github.com/kubernetes/ingress-nginx · Note
• https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v1.11.5 · Note
• https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v1.12.1 · Note
• https://twitter.com/CVEnew/status/1904317724018258315 · Twitter Post