Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-1974
Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
ingress-nginx admission controller RCE escalation
Source: NVD (National Vulnerability Database)
Vulnerability Description
A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
不充分的划分
Source: NVD (National Vulnerability Database)
Vulnerability Title
Kubernetes ingress-nginx 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Kubernetes ingress-nginx是云原生计算基金会(Cloud Native Computing Foundation)开源的Kubernetes 的入口控制器,使用NGINX作为反向代理和负载均衡器。 Kubernetes ingress-nginx存在安全漏洞,该漏洞源于在某些条件下,未认证的攻击者可通过访问pod网络在ingress-nginx控制器环境中执行任意代码,可能导致Secrets泄露。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
kubernetesingress-nginx 0 ~ 1.11.4 -
II. Public POCs for CVE-2025-1974
#POC DescriptionSource LinkShenlong Link
1Worlds First Public POC for CVE-2025-1974 lolhttps://github.com/sandumjacob/IngressNightmare-POCsPOC Details
2Nonehttps://github.com/yoshino-s/CVE-2025-1974POC Details
3Nonehttps://github.com/yanmarques/CVE-2025-1974POC Details
4IngressNightmare POC. world first remote exploitation and with multi-advanced exploitation methods. allow on disk exploitation. CVE-2025-1974 https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities#how-did-we-discover-ingressnightmare-24 https://github.com/Esonhugh/ingressNightmare-CVE-2025-1974-expsPOC Details
5PoC for CVE-2025-1974: Critical RCE in Ingress-NGINX (<v1.12.1) via unsafe config injection. Exploitable from the pod network without credentials, enabling code execution and potential cluster takeover. Fixed in v1.12.1 and v1.11.5. For research/education only.https://github.com/dttuss/IngressNightmare-RCE-POCPOC Details
6Poc for Ingress RCE https://github.com/zwxxb/CVE-2025-1974POC Details
7Proof-of-Concept Tool to detect IngressNightmare (CVE-2025-1974) via (non-intrusive) active means.https://github.com/m-q-t/ingressnightmare-detection-pocPOC Details
8PoC of CVE-2025-1974, modified from the world-first PoC~https://github.com/hi-unc1e/CVE-2025-1974-pocPOC Details
9A minimal test tool to help detect annotation injection vulnerabilities in Kubernetes NGINX Ingress controllers. This script sends a crafted AdmissionReview request to simulate a potential exploit path from CVE-2025-1974 and checks for signs of misinterpreted annotations in controller logs.https://github.com/0xBingo/CVE-2025-1974POC Details
10IngressNightmare (CVE-2025-1974)https://github.com/tuladhar/ingress-nightmarePOC Details
11POC IngressNightmare (CVE-2025-1974), modified from https://github.com/yoshino-s/CVE-2025-1974https://github.com/rjhaikal/POC-IngressNightmare-CVE-2025-1974POC Details
12CVE-2025-1974 PoC 코드https://github.com/zulloper/CVE-2025-1974POC Details
13Exploit CVE-2025-1974 with a single file.https://github.com/Rubby2001/CVE-2025-1974-goPOC Details
14A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.) https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1974.yamlPOC Details
15A security issue was discovered in ingress-nginx where the `auth-tls-match-cn` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controllerhttps://github.com/projectdiscovery/nuclei-templates/blob/main/cloud/kubernetes/cves/2025/CVE-2025-1974-k8s.yamlPOC Details
16Nonehttps://github.com/Threekiii/Awesome-POC/blob/master/%E4%BA%91%E5%AE%89%E5%85%A8%E6%BC%8F%E6%B4%9E/Kubernetes%20Ingress-nginx%20admission%20%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%20CVE-2025-1974.mdPOC Details
17https://github.com/vulhub/vulhub/blob/master/ingress-nginx/CVE-2025-1974/README.mdPOC Details
18Nonehttps://github.com/chhhd/CVE-2025-1974POC Details
19WHS3기 가상화 취약한(CVE) Docker 환경 구성 과제https://github.com/salt318/CVE-2025-1974POC Details
20Nonehttps://github.com/abrewer251/CVE-2025-1974_IngressNightmare_PoCPOC Details
21Nonehttps://github.com/Rickerd12/exploit-cve-2025-1974POC Details
22CVE-2025-1974https://github.com/B1ack4sh/Blackash-CVE-2025-1974POC Details
23Nonehttps://github.com/Armand2002/Exploit-CVE-2025-1974-LabPOC Details
24Nonehttps://github.com/BiiTts/POC-IngressNightmare-CVE-2025-1974POC Details
25Nonehttps://github.com/iteride/CVE-2025-1974POC Details
26My view on IngressNightmare vulnerability (CVE-2025-1974)https://github.com/I3r1h0n/IngressNightterrorPOC Details
27CVE-2025-1974https://github.com/Ashwesker/Blackash-CVE-2025-1974POC Details
28Kubernetes Ingress-nginx RCE (IngressNightmare)https://github.com/gunyakit/CVE-2025-1974-PoC-exploitPOC Details
29CVE-2025-1974https://github.com/Ashwesker/Ashwesker-CVE-2025-1974POC Details
30 ingress-nginx admission controller RCE escalation PoChttps://github.com/BoianEduard/CVE-2025-1974POC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2025-1974
Please Login to view more intelligence information
IV. Related Vulnerabilities
V. Comments for CVE-2025-1974

No comments yet


Leave a comment