CVE-2025-1974
Deferred Deferred - Pending Action

BaseFortify

Publication date: 2025-03-25

Last updated on: 2026-06-17

Assigner: Kubernetes

Description
A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2025-03-25
Last Modified
2026-06-17
Generated
2026-10-16
AI Q&A
2025-03-25
EPSS Evaluated
2026-10-14
NVD
CVE-2025-1974

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
kubernetes ingress-nginx 0
kubernetes ingress-nginx 1.12.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-653 The product does not properly compartmentalize or isolate functionality, processes, or resources that require different privilege levels, rights, or permissions.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.) [1]

Impact Analysis

The vulnerability can allow an unauthenticated attacker to execute arbitrary code within the ingress-nginx controller, potentially leading to the disclosure of sensitive Secrets that the controller can access. [1]

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-1974. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart