CVE-2025-1974 PoC — ingress-nginx admission controller RCE escalation

Source

https://github.com/BiiTts/POC-IngressNightmare-CVE-2025-1974

Associated Vulnerability

Title: ingress-nginx admission controller RCE escalation (CVE-2025-1974)
Description:A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)

Readme

# Shell.so Builder (Alpine-based)

This project allows you to build a `shell.so` payload using Alpine Linux inside a Docker container.

## Instructions

1. **Clone the repository**:
   git clone <repository_url>
   cd <repository_name>

2. **Build the payload**:
   ./run_build.sh

The compiled `shell.so` will be generated in the project root directory.

⚠️ Important: The reverse shell IP and port are hardcoded in shell.c. Make sure to update them before building the payload.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →