CVE-2025-15566 | THREATINT

Description

A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-proxy-set-headers` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)

PUBLISHED Reserved 2026-02-05 | Published 2026-02-06 | Updated 2026-02-06 | Assigner kubernetes

HIGH: 8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-20 Improper Input Validation

Product status

Default status

affected

Any version before 1.12.5

affected

Any version before 1.13.1

affected

Credits

Jan-Otto Kröpke finder

References

github.com/kubernetes/kubernetes/issues/136789

cve.org (CVE-2025-15566)

nvd.nist.gov (CVE-2025-15566)

Download JSON