CVE-2025-24514

8.8

HIGH

Kubernetes Ingress-Nginx Annotation Injection Vulnerability (Arbitrary Code Execution & Secret Disclosure)

Description

A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)

INFO

Published Date :

March 25, 2025, 12:15 a.m.

Last Modified :

March 27, 2025, 4:45 p.m.

Source :

[email protected]

Remotely Exploitable :

Yes !

Impact Score :

5.9

Exploitability Score :

2.8 Public PoC/Exploit Available at Github

CVE-2025-24514 has a 13 public PoC/Exploit available at Github. Go to the Public Exploits tab to see the list.

Affected Products

The following products are affected by CVE-2025-24514 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID	Vendor	Product	Action
1	Kubernetes	ingress-nginx

: Total Affected Vendor : 1 | Products : 1

References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2025-24514.

URL	Resource
https://github.com/kubernetes/kubernetes/issues/131006

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

lufeirider/IngressNightmare-PoC

IngressNightmare-PoC： (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, CVE-2025-1974) PoC ，One-click script 。一键脚本

Python

Updated: 2 weeks ago

8 stars 5 fork 5 watcher

Born at : March 30, 2025, 8:32 a.m. This repo has been linked 4 different CVEs too.

gian2dchris/ingress-nightmare-poc

Ingress Nightmare PoC

cve-2025-1974 kubernetes nginx-ingress ingress-nightmare

Python Shell C

Updated: 2 weeks, 2 days ago

0 stars 0 fork 0 watcher

Born at : March 29, 2025, 1:52 p.m. This repo has been linked 4 different CVEs too.

killsystema/IngressNightmare

None

Python

Updated: 2 weeks, 6 days ago

0 stars 0 fork 0 watcher

Born at : March 27, 2025, 4:50 p.m. This repo has been linked 4 different CVEs too.

hakaioffsec/IngressNightmare-PoC

This is a PoC code to exploit the IngressNightmare vulnerabilities (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974).

Python C

Updated: 3 days, 6 hours ago

193 stars 41 fork 41 watcher

Born at : March 26, 2025, 6:52 p.m. This repo has been linked 4 different CVEs too.

m-q-t/ingressnightmare-detection-poc

Proof-of-Concept Tool to detect IngressNightmare (CVE-2025-1974) via (non-intrusive) active means.

Python

Updated: 3 weeks ago

0 stars 0 fork 0 watcher

Born at : March 26, 2025, 3:44 p.m. This repo has been linked 2 different CVEs too.

Esonhugh/ingressNightmare-CVE-2025-1974-exps

IngressNightmare POC. world first remote exploitation and with multi-advanced exploitation methods. allow on disk exploitation. CVE-2025-24514 - auth-url injection, CVE-2025-1097 - auth-tls-match-cn injection, CVE-2025-1098 – mirror UID injection -- all available

cve-2025-1974 kubernetes poc security all-in-one cve-2025-1097 cve-2025-1098 cve-2025-24514

Go Makefile C

Updated: 1 day, 20 hours ago

70 stars 11 fork 11 watcher

Born at : March 26, 2025, 6:43 a.m. This repo has been linked 4 different CVEs too.

scottymcandrew/ingress-nightmare

None

Python

Updated: 3 weeks, 1 day ago

0 stars 0 fork 0 watcher

Born at : March 25, 2025, 11:56 a.m. This repo has been linked 4 different CVEs too.

sandumjacob/IngressNightmare-POCs

Worlds First Public POC for CVE-2025-1974 lol

Python

Updated: 5 days, 3 hours ago

86 stars 27 fork 27 watcher

Born at : March 24, 2025, 9:51 p.m. This repo has been linked 5 different CVEs too.

0xMarcio/cve

Latest CVEs with their Proof of Concept exploits.

Python

Updated: 1 day, 19 hours ago

33 stars 5 fork 5 watcher

Born at : May 24, 2024, 11:02 a.m. This repo has been linked 85 different CVEs too.

Threekiii/CVE

一个 CVE 漏洞预警知识库，无 exp/poc，部分包含修复方案。A knowledge base of CVE security vulnerability, no PoCs/exploits.

Updated: 2 days, 21 hours ago

116 stars 18 fork 18 watcher

Born at : Jan. 5, 2023, 2:19 a.m. This repo has been linked 162 different CVEs too.

giterlizzi/secdb-feeds

SecDB - Security Feeds

cve security-feeds vulnerability

Updated: 3 weeks ago

0 stars 0 fork 0 watcher

Born at : July 1, 2022, 8:37 p.m. This repo has been linked 90 different CVEs too.

GhostTroops/TOP

TOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things

bugbounty cve exp exploit payload poc rce vulnerability

Shell

Updated: 2 days, 6 hours ago

694 stars 117 fork 117 watcher

Born at : March 19, 2022, 1:54 a.m. This repo has been linked 282 different CVEs too.

WyriHaximus/WyriHaximus

None

hacktoberfest

Updated: 1 day, 13 hours ago

1 stars 0 fork 0 watcher

Born at : July 4, 2020, 9:51 p.m. This repo has been linked 4 different CVEs too.

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2025-24514 vulnerability anywhere in the article.

CrowdStrike.com

Kubernetes IngressNightmare Vulnerabilities: What You Need to Know

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in ...

Published Date: Apr 17, 2025 (1 hour, 51 minutes ago)