ingress-nginx admission controller RCE escalation

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2025-1974 · CVE overview and exploitation status

EUVD-2025-8035

GHSA-mgvx-rpfc-9mpv

GO-2025-3567

cve-program · CVE-2025-1974

• https://https//github.com/kubernetes/kubernetes/issues/131009

euvd · EUVD-2025-8035

• https://https//github.com/kubernetes/kubernetes/issues/131009

nvd · CVE-2025-1974

• https://https//github.com/kubernetes/kubernetes/issues/131009
• https://github.com/B1ack4sh/Blackash-CVE-2025-1974
• https://security.netapp.com/advisory/ntap-20250328-0008/
• https://www.exploit-db.com/exploits/52475

osv · GHSA-mgvx-rpfc-9mpv

• https://nvd.nist.gov/vuln/detail/CVE-2025-1974
• https://github.com/kubernetes/kubernetes/issues/131009
• https://github.com/B1ack4sh/Blackash-CVE-2025-1974
• https://github.com/kubernetes/ingress-nginx
• https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v1.11.5
• https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v1.12.1
• https://groups.google.com/g/kubernetes-security-announce/c/2qa9DFtN0cQ
• https://https//github.com/kubernetes/kubernetes/issues/131009
• https://security.netapp.com/advisory/ntap-20250328-0008
• https://www.exploit-db.com/exploits/52475

osv · GO-2025-3567

• https://github.com/advisories/GHSA-mgvx-rpfc-9mpv
• https://nvd.nist.gov/vuln/detail/CVE-2025-1974
• https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v1.11.5
• https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v1.12.1
• https://github.com/kubernetes/kubernetes/issues/131009
• https://groups.google.com/g/kubernetes-security-announce/c/2qa9DFtN0cQ

• A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to d… · Advisory content revised · 15 Nov 2026
• Release 2025-04-06 · Tool release · 10 Apr 2025