CVE-2025-1974: IngressNightmare (Kubernetes Ingress-NGINX)
What is IngressNightmare?
A critical unauthenticated RCE vulnerability in the Kubernetes ingress-nginx admission controller, dubbed "IngressNightmare." Attackers can inject arbitrary NGINX configuration directives through ingress annotations, achieving code execution on the ingress controller pod.
Impact & Exploitation
Affects ~43% of all Kubernetes clusters. Enables cluster takeover by accessing secrets from all namespaces. Any pod in the cluster can exploit the admission webhook without authentication.
How Precogs AI Detects IngressNightmare (Kubernetes Ingress-NGINX)
Precogs AI identifies vulnerable ingress-nginx versions in Kubernetes deployments and detects configuration injection patterns in compiled admission controller binaries.
Precogs Research
This vulnerability intelligence report was analyzed and enriched by the Precogs AI Security Team. Our researchers continuously monitor emerging threats across AI code, LLM pipelines, and binary architectures to ensure accurate real-time remediation guidance.