PT-2025-12717 · Unknown+1 · Ingress-Nginx+1

Nir Ohfeld + 2 · Published 2025-03-23 · Updated 2026-05-04 · CVE-2025-24514

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ingress-nginx versions prior to v1.11.5 ingress-nginx versions from v1.12.0-beta.0 through v1.12.1

Description A security issue exists in ingress-nginx where the auth-url Ingress annotation can be exploited to inject configuration into nginx. Successful exploitation can lead to arbitrary code execution within the context of the ingress-nginx controller and potential disclosure of Secrets accessible to the controller. In a default installation, the controller has access to all Secrets within the cluster. The issue is due to insufficient input validation.

Recommendations Update to a version of ingress-nginx greater than or equal to v1.11.5. Update to a version of ingress-nginx greater than or equal to v1.12.1.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

CWE-15

Related Identifiers

BDU:2025-03220

BIT-NGINX-INGRESS-CONTROLLER-2025-24514

CVE-2025-24514

GHSA-FWWP-XCXW-39VQ

GO-2025-3566

OPENSUSE-SU-2025:14937-1

Affected Products

Red Os

Ingress-Nginx

References · 139

• 🔥 https://exploit-db.com/exploits/52475 · Exploit
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-fwwp-xcxw-39vq · Vendor Advisory
• https://osv.dev/vulnerability/BIT-nginx-ingress-controller-2025-24514 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-24514 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-3566 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/719084 · Security Note
• https://bdu.fstec.ru/vul/2025-03220 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-24514 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:14937-1 · Vendor Advisory
• https://github.com/kubernetes/kubernetes/issues/131006 · Note
• https://github.com/kubernetes/ingress-nginx · Note
• https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v1.12.1 · Note
• https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v1.11.5 · Note
• https://kubernetes.io/blog/2025/03/24/ingress-nginx-cve-2025-1974 · Note