ingress-nginx controller configuration injection via unsanitized auth-tls-match-cn annotation

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Mar 23, 2025 · Kubernetes Security

   Detected

   ingress-nginx controller configuration injection via unsanitized auth-tls-match-cn annotation

Sources

• CVE.orgVulnerability recordCVE-2025-1097

  Official CVE identifier

  cve.org
• Kubernetes SecurityVendor advisoryCVE-2025-1097

  ingress-nginx controller configuration injection via unsanitized auth-tls-match-cn annotation

  github.com