Ingress-nginx CVE-2025-1974: What You Need to Know

Impact: Disclosure of Secrets accessible to the controller.

• https://kubernetes.io/blog/2025/03/24/ingress-nginx-cve-2025-1974/
• CVE: 9.8 Critical https://nvd.nist.gov/vuln/detail/CVE-2025-1974

• By default, ingress-nginx has access to all Secrets cluster-wide

Related

• helm install ingress-nginx
• controller.admissionWebhooks.enabled=false
• Validating Admission Controller

See also

• NGINX Ingress Controller: ConfigMap ingress-nginx, UnAvailableLoadBalancer, UpdatedLoadBalancer, ingress-nginx-controller, ingress-nginx-controller-controller-admission, nginx.org/ingress-controller, k8s.io/ingress-nginx, PathType, values.yaml