What’s Vulnerable › Products

Kubernetes ingress-nginx vulnerabilities

20 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.

Check whether your Kubernetes ingress-nginx version is affected

Latest Kubernetes ingress-nginx vulnerabilities

• CVE-2026-3288 — ingress-nginx rewrite-target nginx configuration injection (CVSS 8.8)
• CVE-2025-15566 — ingress-nginx auth-proxy-set-headers nginx configuration injection (CVSS 8.8)
• CVE-2026-24514 — ingress-nginx Admission Controller denial of service (CVSS 6.5)
• CVE-2026-24513 — ingress-nginx auth-url protection bypass (CVSS 3.1)
• CVE-2026-24512 — ingress-nginx auth-method nginx configuration injection (CVSS 8.8)
• CVE-2026-1580 — ingress-nginx auth-method nginx configuration injection (CVSS 8.8)
• CVE-2025-24514 — ingress-nginx controller - configuration injection via unsanitized auth-url annotation (CVSS 8.8)
• CVE-2025-24513 — ingress-nginx controller - auth secret file path traversal vulnerability (CVSS 4.8)
• CVE-2025-1974 — ingress-nginx admission controller RCE escalation (CVSS 9.8)
• CVE-2025-1098 — ingress-nginx controller - configuration injection via unsanitized mirror annotations (CVSS 8.8)
• CVE-2025-1097 — ingress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation (CVSS 8.8)
• CVE-2024-7646 — (CVSS 8.8)
• CVE-2023-5044 — Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation (CVSS 8.8)
• CVE-2023-5043 — Ingress nginx annotation injection causes arbitrary command execution (CVSS 8.8)
• CVE-2022-4886 — Ingress-nginx `path` sanitization can be bypassed with `log_format` directive (CVSS 6.5)
• CVE-2021-25748 — Ingress-nginx `path` sanitization can be bypassed with newline character (CVSS 6.5)
• CVE-2021-25746 — Ingress-nginx directive injection via annotations (CVSS 7.1)
• CVE-2021-25745 — Ingress-nginx path can be pointed to service account token file (CVSS 8.1)
• CVE-2021-25742 — Ingress-nginx custom snippets allows retrieval of ingress-nginx serviceaccount token and secrets across all namespaces (CVSS 7.1)
• CVE-2020-8553 — Kubernetes ingress-nginx Compromise of auth via subset/superset namespace names (CVSS 5.9)