Database/Container, Kubernetes & orchestration

ingress-nginx: Config injection via unsanitized auth-tls-match-cn annotation

CVE-2025-1097Container, Kubernetes & orchestrationcurated

Impact

Config injection via unsanitized auth-tls-match-cn annotation

Who can reach it

Cluster user who can create Ingress objects

What to do

Rolling controller upgrade

References

https://kubernetes.io/docs/reference/issues-security/official-cve-feed/

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.