CVE-2025-1974

Description

A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)

From the Tenable Blog

CVE-2025-1097, CVE-2025-1098, CVE-2025-1974, CVE-2025-24513, CVE-2025-24514: Frequently Asked Questions About IngressNightmare

Published: 2025-03-25

Frequently asked questions about five vulnerabilities in the Ingress NGINX Controller for Kubernetes, collectively known as IngressNightmare.

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-05

https://www.securityweek.com/ingressnightmare-flaws-expose-many-kubernetes-clusters-to-remote-hacking/

https://www.theregister.com/2025/03/25/kubernetes_flaw_rce_risk/

https://www.tenable.com/blog/cve-2025-1974-frequently-asked-questions-about-ingressnightmare-kubernetes

https://www.darkreading.com/application-security/critical-ingressnightmare-vulns-kubernetes-environments

https://thehackernews.com/2025/03/critical-ingress-nginx-controller.html

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-1974

https://cloud.google.com/support/bulletins/index#gcp-2025-013

https://aws.amazon.com/security/security-bulletins/AWS-2025-006/

https://github.com/kubernetes/kubernetes/issues/131009

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3