CVE-2026-116472— ingress-nginx 镜像目标拒绝服务漏洞
一分钟漏洞结论
影响对象
Kubernetes ingress-nginx
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
在 ingress-nginx 中发现了一个安全问题：拥有创建 Ingress 权限的用户可能能够导致 ingress-nginx 数据平面发生拒绝服务（DoS），或者可能将其他 Ingress 的流量进行重定向。仅当 Kubernetes 集群使用了 ingress-nginx 时，才会受到此问题影响。 由于缺少必要的校验， Ingress 注解可被用于指向 ingress-nginx 控制器内部未进行身份验证的配置 API，从而允许提交写操作命令。若该配置 API 中的数据被破坏，将导致所有经过 ingress
影响版本矩阵 2
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| Kubernetes | ingress-nginx | < * |
affected |
| SUSE | Rancher Prime RKE2 ingress-nginx | < 1.15.2-prime1 |
affected |
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2026-116472 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
ingress-nginx mirror-target self-DOS
来源: CVE Program / CVE List V5
Vulnerability Description
A security issue was discovered in ingress-nginx where a user with permission to create an Ingress may be able to cause denial of service of the ingress-nginx data plane, or possibly redirect traffic from other Ingresses. Kubernetes clusters are only affected if they are using ingress-nginx.
Due to a missing check, the mirror-target Ingress annotation can be used to target an unauthenticated configuration API within the ingress-nginx controller, allowing write commands to be submitted. Corrupting the data within that configuration API results in all traffic through ingress-nginx being dropped until an Ingress configuration change or a controller restart causes the data to be recreated correctly.
In principle, this write access could also be used to redirect traffic from other Ingresses controlled by the same ingress-nginx instance. In practice, there is negligible additional risk: such redirection would require privileged information about internal ingress-nginx state, and users can already redirect traffic from other Ingresses controlled by the same ingress-nginx anyway.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
来源: CVE Program / CVE List V5
Vulnerability Type
输入验证不恰当
来源: CVE Program / CVE List V5
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| Kubernetes | ingress-nginx | 0 ~ * | - |
|
| SUSE | Rancher Prime RKE2 ingress-nginx | 0 ~ 1.15.2-prime1 | - |
|
二、漏洞 CVE-2026-116472 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2026-116472 的情报信息
请登录查看更多情报信息。
CVE-2026-116472 其他参考 (1)
-
https://github.com/kubernetes/kubernetes/issues/143852 vendor-advisory