Database/Container, Kubernetes & orchestration

ingress-nginx: Config injection via the auth-proxy-set-headers annotation

CVE-2025-15566Container, Kubernetes & orchestrationcurated

Impact

Config injection via the auth-proxy-set-headers annotation

Who can reach it

Cluster user who can create Ingress objects

What to do

Rolling controller upgrade

References

https://kubernetes.io/docs/reference/issues-security/official-cve-feed/

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.